Issue Details
System Prompt Leakage
llm07-2025 • Rank #7 in OWASP 2025
Explanation
System prompt leakage occurs when hidden instructions, internal policies, or privileged context are revealed through prompt manipulation or model behavior quirks. Exposure of internal control logic helps attackers craft more effective bypass strategies. Leakage also risks disclosing operational details and sensitive governance controls.
Remedy
Keep sensitive policy controls outside prompt text wherever possible and enforce external policy engines for critical checks. Use response filtering and leak-detection tests to prevent hidden prompt disclosure. Segment privileged context and monitor extraction attempts as security events.
| Year | Rank | Category |
|---|---|---|
| 2025 | #7 | llm07-2025 - System Prompt Leakage |