AI Governance Engineer
GitHub

ASI01–ASI10

By Updated

The ten risks of the OWASP Top 10 for Agentic Applications 2026 1: ASI01 Agent Goal Hijack, ASI02 Tool Misuse and Exploitation, ASI03 Identity and Privilege Abuse, ASI04 Agentic Supply Chain Vulnerabilities, ASI05 Unexpected Code Execution (RCE), ASI06 Memory & Context Poisoning, ASI07 Insecure Inter-Agent Communication, ASI08 Cascading Failures, ASI09 Human-Agent Trust Exploitation and ASI10 Rogue Agents.

Developed in
ch. 23, Threats mapped to controls
ch. 08, OWASP GenAI Security Project
Chapters
ch. 05, Patterns · ch. 08, Regulatory Map · ch. 23, AI Agents
Source
1 numbered reference, listed below

Where it is used

2 chapters of the Body of Knowledge use the term. Each link opens the first section that does.

ASI01–ASI10: mentions per chapter2 mentions of the term across 2 of the 23 chapters of the Body of Knowledge; the chapters the glossary cross-references are drawn solid.Cross-referenced chapterOther chapterCross-referenced, not named05 Patterns008 Regulatory Map013 Risk Management: 1 mention13 Risk Management123 AI Agents: 1 mention23 AI Agents1No mentions in the other 19 chaptersSource: the Body of Knowledgev0.5.0
ASI01–ASI10: mentions per chapter2 mentions of the term across 2 of the 23 chapters of the Body of Knowledge; the chapters the glossary cross-references are drawn solid.Cross-referenced chapterOther chapterCross-referenced, not named00010203040506070810111213 Risk Management: 1 mention11314151617181920212223 AI Agents: 1 mention123Source: the Body of Knowledge v0.5.0
Mentions per chapter How often each chapter names the term, with the chapters the glossary cross-references drawn solid. The longest bar is where to read the term in use; bars spread across many chapters mark a term that runs through the discipline.
Mentions as a table
Mentions of ASI01–ASI10 per chapter
ChapterMentionsCross-referenced
00 Preface0No
01 Definition0No
02 Why Now0No
03 Values & Principles0No
04 The Stack0No
05 Patterns0Yes
06 The Role0No
07 Maturity Model0No
08 Regulatory Map0Yes
10 Reading List0No
11 AI Defined0No
12 Governance Program0No
13 Risk Management1No
14 Development0No
15 Deployment0No
16 Fairness & XAI0No
17 Incidents0No
18 EU AI Act0No
19 Privacy & AI0No
20 Existing Law0No
21 AI Laws Worldwide0No
22 Principles & Standards0No
23 AI Agents1Yes
  • ATLAS

    MITRE's Adversarial Threat Landscape for Artificial-Intelligence Systems, a knowledge base of adversary tactics and techniques against AI, including…

Sources

  1. [1] Top 10 for Agentic Applications 2026 (ASI01 Agent Goal Hijack; ASI02 Tool Misuse and Exploitation; ASI03 Identity and Privilege Abuse; ASI04 Agentic Supply Chain Vulnerabilities; ASI05 Unexpected Code Execution (RCE); ASI06 Memory & Context Poisoning; ASI07 Insecure Inter-Agent Communication; ASI08 Cascading Failures; ASI09 Human-Agent Trust Exploitation; ASI10 Rogue Agents; Least-Agency; per-tool least-privilege profiles; tool poisoning of a legitimate tool's interface under ASI02, a tool compromised at the source under ASI04). OWASP GenAI Security Project. 2025-12-09. https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/ (verified: primary)

Definitions of legal terms paraphrase the cited text, which governs. Dated statements are as of .

Cite this term

García Aibar, J. (2026). ASI01–ASI10. In AI Governance Engineering: The Thesis & Body of Knowledge (v0.5.0), Glossary. https://doi.org/10.5281/zenodo.22956197. https://aigovernanceengineer.com/glossary/asi01-asi10. CC BY 4.0

BibTeX

@misc{aige2026asi01asi10,
  author  = {Jorge García Aibar},
  title   = {{ASI01–ASI10}},
  note    = {Glossary, AI Governance Engineering: The Thesis \& Body of Knowledge, version 0.5.0},
  year    = {2026},
  doi     = {10.5281/zenodo.22956197},
  url     = {https://aigovernanceengineer.com/glossary/asi01-asi10}
}