Analysis

Prompt Injection | OWASP GenAI Security Project Security Glossary

Page published

Publication date unknown · First observed: 9 Nov 2026

Coverage timeline

9 Nov 2026owasp.orgobserved

Single-source analysis — one report is available.

Why it matters

OWASP’s glossary helps defenders understand how untrusted content can influence agent behavior and why limiting permissions and requiring approval for consequential actions reduce exposure.

OWASP’s prompt-injection glossary entry explains direct and indirect injection, including how malicious instructions in retrieved content can induce agents to disclose information or perform unauthorized actions. The reference outlines mitigations such as least privilege, input/output validation, human approval, and prompt hardening; it does not disclose a new exploit or specific incident.