# OWASP Agentic AI Top 10 (2026) — designpattern.fyi

> The OWASP Top 10 for Agentic Applications - security risks for autonomous AI agent systems.

- **Section**: OWASP Agentic AI Top 10 (2026)
- **Canonical URL**: https://designpattern.fyi/owasp_agentic_ai/

---

## Patterns in this Category


### [ASI01 - Agent Goal Hijack](https://designpattern.fyi/owasp_agentic_ai/asi01_agent_goal_hijack/)
- **Summary**: Attackers trick the agent into changing its main goal or following hidden malicious instructions.
- **Subcategory**: top10_2026


### [ASI02 - Tool Misuse & Exploitation](https://designpattern.fyi/owasp_agentic_ai/asi02_tool_misuse/)
- **Summary**: Agent manipulated into using legitimate tools in unsafe or unintended ways.
- **Subcategory**: top10_2026


### [ASI03 - Identity & Privilege Abuse](https://designpattern.fyi/owasp_agentic_ai/asi03_identity_privilege_abuse/)
- **Summary**: Agent assumes or escalates high-privilege credentials for unauthorized actions.
- **Subcategory**: top10_2026


### [ASI04 - Agentic Supply Chain Vulnerabilities](https://designpattern.fyi/owasp_agentic_ai/asi04_supply_chain/)
- **Summary**: Risks from compromised third-party agents, tools, plugins, or prompt templates.
- **Subcategory**: top10_2026


### [ASI05 - Unexpected Code Execution](https://designpattern.fyi/owasp_agentic_ai/asi05_unexpected_code_execution/)
- **Summary**: Agent generates and executes code or commands that compromise the host system.
- **Subcategory**: top10_2026


### [ASI06 - Memory & Context Poisoning](https://designpattern.fyi/owasp_agentic_ai/asi06_memory_context_poisoning/)
- **Summary**: Attackers plant malicious data in agent memory or RAG databases to influence future decisions.
- **Subcategory**: top10_2026


### [ASI07 - Insecure Inter-Agent Communication](https://designpattern.fyi/owasp_agentic_ai/asi07_insecure_inter_agent/)
- **Summary**: Lack of proper authentication or integrity in multi-agent exchanges.
- **Subcategory**: top10_2026


### [ASI08 - Cascading Failures](https://designpattern.fyi/owasp_agentic_ai/asi08_cascading_failures/)
- **Summary**: A single fault propagates and amplifies across autonomous agent networks.
- **Subcategory**: top10_2026


### [ASI09 - Human-Agent Trust Exploitation](https://designpattern.fyi/owasp_agentic_ai/asi09_human_trust_exploitation/)
- **Summary**: Exploiting the persuasive nature of agents to manipulate users into unsafe actions.
- **Subcategory**: top10_2026


### [ASI10 - Rogue Agents](https://designpattern.fyi/owasp_agentic_ai/asi10_rogue_agents/)
- **Summary**: Compromised agents that deviate from intended scope to act harmfully while appearing legitimate.
- **Subcategory**: top10_2026



---

## Machine-Readable Resources
- **JSON Feed**: https://www.designpattern.fyi/api/patterns.json
- **OpenAPI 3.1**: https://www.designpattern.fyi/api/openapi.json
- **llms.txt**: https://www.designpattern.fyi/llms.txt