# OWASP AI Vulnerability Scoring System (AIVSS) — designpattern.fyi

> AI Vulnerability Scoring System - scoring framework for agentic AI security risks with amplification factors.

- **Section**: OWASP AI Vulnerability Scoring System (AIVSS)
- **Canonical URL**: https://designpattern.fyi/owasp_aivss/

---

## Patterns in this Category


### [AIVSS01 - Agentic AI Tool Misuse](https://designpattern.fyi/owasp_aivss/aivss01_tool_misuse/)
- **Summary**: Agent misuses, is tricked into misusing, or is exposed to compromised external tools/APIs.
- **Subcategory**: core_security_risks


### [AIVSS02 - Agent Access Control Violation](https://designpattern.fyi/owasp_aivss/aivss02_access_control_violation/)
- **Summary**: Agent operates beyond its intended authorization boundary (permission escalation, role forgery, confused-deputy patterns).
- **Subcategory**: core_security_risks


### [AIVSS03 - Agent Cascading Failures](https://designpattern.fyi/owasp_aivss/aivss03_cascading_failures/)
- **Summary**: A compromise in one agent propagates and amplifies across connected systems and SaaS integrations.
- **Subcategory**: core_security_risks


### [AIVSS04 - Agent Orchestration & Multi-Agent Exploitation](https://designpattern.fyi/owasp_aivss/aivss04_orchestration_exploitation/)
- **Summary**: Attacks on how multiple agents coordinate, communicate, and trust one another.
- **Subcategory**: core_security_risks


### [AIVSS05 - Agent Identity Impersonation](https://designpattern.fyi/owasp_aivss/aivss05_identity_impersonation/)
- **Summary**: An agent impersonates another agent, or a human, to exploit trust (deepfakes, forged agent cards, agent-in-the-middle).
- **Subcategory**: core_security_risks


### [AIVSS06 - Agent Memory and Context Manipulation](https://designpattern.fyi/owasp_aivss/aivss06_memory_context_manipulation/)
- **Summary**: Poisoning, corrupting, or exploiting an agent's stored memory/context across sessions.
- **Subcategory**: core_security_risks


### [AIVSS07 - Insecure Agent Critical Systems Interaction](https://designpattern.fyi/owasp_aivss/aivss07_critical_systems_interaction/)
- **Summary**: Agent interacts unsafely with critical infrastructure, IoT, or production systems, causing physical/operational harm.
- **Subcategory**: core_security_risks


### [AIVSS08 - Agent Supply Chain and Dependency Risk](https://designpattern.fyi/owasp_aivss/aivss08_supply_chain_dependency_risk/)
- **Summary**: Compromise via the agent's models, training data, libraries, plugins, or MCP/third-party service dependencies.
- **Subcategory**: core_security_risks


### [AIVSS09 - Agent Untraceability](https://designpattern.fyi/owasp_aivss/aivss09_untraceability/)
- **Summary**: Inability to reconstruct who/what/why behind an agent's action — a "forensic black hole."
- **Subcategory**: core_security_risks


### [AIVSS10 - Agent Goal and Instruction Manipulation](https://designpattern.fyi/owasp_aivss/aivss10_goal_instruction_manipulation/)
- **Summary**: Prompt injection and goal-hijacking that subverts the agent's core objective.
- **Subcategory**: core_security_risks



---

## Machine-Readable Resources
- **JSON Feed**: https://www.designpattern.fyi/api/patterns.json
- **OpenAPI 3.1**: https://www.designpattern.fyi/api/openapi.json
- **llms.txt**: https://www.designpattern.fyi/llms.txt