OWASP Top 10 LLM Security Risks for 2026: Java

ID	Checker name
LLM01: Prompt Injection	ANDROID.LIFECYCLE.SV.GETEXTRA JAVA.SV.LLM.PROMPT.INJECTION JAVA.SV.LLM.SAFETY.DISABLED JAVA.SV.XML.INVALID SV.DATA.DB SV.EXEC SV.EXEC.DIR SV.EXEC.ENV SV.EXEC.LOCAL SV.HTTP_SPLIT SV.LDAP SV.LOG_FORGING SV.PATH SV.PATH.INJ SV.SCRIPT SV.SQL SV.SQL.DBSOURCE SV.TAINT SV.TAINT_NATIVE SV.XPATH SV.XSS.DB SV.XSS.REF
LLM02: Sensitive Information Disclosure	JAVA.SV.LLM.APIKEY.HC SV.EXPOSE.FIELD SV.EXPOSE.FIN SV.EXPOSE.IFIELD SV.EXPOSE.MUTABLEFIELD SV.EXPOSE.RET SV.EXPOSE.STORE SV.IL.DEV SV.IL.FILE SV.IL.SESSION SV.IL.SESSION.CLIENT SV.PASSWD.HC SV.PASSWD.HC.EMPTY SV.PASSWD.HC.MINLEN SV.PASSWD.PLAIN SV.PASSWD.PLAIN.HC SV.SENSITIVE.DATA SV.SENSITIVE.OBJ SV.STRBUF.CLEAN UMC.SYSERR UMC.SYSOUT
LLM03: Excessive Agency	JAVA.SV.LLM.TOOL.PRIV RI.IGNOREDCALL RR.IGNORED SPRING.AUTHZ.ABSENT SPRING.AUTHZ.MISSING SV.CLASSDEF.INJ SV.CLASSLOADER.INJ SV.EXEC SV.EXEC.DIR SV.EXEC.ENV SV.EXEC.LOCAL SV.EXEC.PATH SV.LOADLIB.INJ SV.PERMS.HOME SV.PERMS.WIDE SV.PRIVILEGE.MISSING SV.SOCKETS SV.SSRF.URI SV.UMC.EXIT UMC.EXIT
LLM04: Supply Chain	JAVA.SV.LLM.MODEL.DESERIAL NPE.COND NPE.CONST NPE.RET NPE.RET.UTIL NPE.STAT RI.IGNOREDCALL RI.IGNOREDNEW RLK.FIELD RLK.HIBERNATE RLK.IN RLK.JNDI RLK.JPA RLK.NIO RLK.OUT RLK.SOCK RLK.SQLCON RLK.SQLOBJ RLK.ZIP RR.IGNORED SV.CLASSDEF.INJ SV.CLASSLOADER.INJ SV.CLEXT.CLLOADER SV.CLEXT.POLICY SV.CLLOADER SV.LOADLIB.INJ SV.SERIAL.NOFINAL SV.SERIAL.NOREAD SV.SERIAL.NOWRITE SV.SERIAL.OVERRIDE SV.SERIAL.SIG SV.STRUTS.VER
LLM05: Data and Model Poisoning	JD.INF.ALLOC SV.DATA.DB SV.DATA.FILE SV.DOS.ARRINDEX SV.DOS.ARRSIZE SV.INT_OVF SV.PATH SV.PATH.INJ SV.SQL SV.SQL.DBSOURCE SV.TAINT SV.TAINT_NATIVE SV.TMPFILE SV.XXE.DBF SV.XXE.SF SV.XXE.SPF SV.XXE.TF SV.XXE.XIF SV.XXE.XRF
LLM06: Unbounded Consumption	JAVA.INF.LOOP.EMPTY JAVA.SV.LLM.CLIENT.NOTIMEOUT JAVA.SV.LLM.INPUT.UNBOUNDED JAVA.WAIT.IN.LOOP JD.INF.ALLOC JD.LOCK JD.LOCK.NOTIFY JD.LOCK.SLEEP JD.LOCK.WAIT JD.SYNC.DCL JD.THREAD.RUN RLK.AWT RLK.FIELD RLK.HIBERNATE RLK.IMAGEIO RLK.IN RLK.JNDI RLK.JPA RLK.MAIL RLK.MICRO RLK.NIO RLK.OUT RLK.SOCK RLK.SQLCON RLK.SQLOBJ RLK.SWT RLK.ZIP SV.DOS.ARRINDEX SV.DOS.ARRSIZE SV.DOS.TMPFILEDEL SV.DOS.TMPFILEEXIT SV.INT_OVF SV.SHARED.VAR SV.UMC.JDBC SV.UMC.THREADS
LLM07: Misinformation	ECC.EMPTY EXC.BROADTHROWS JD.CATCH NPE.COND NPE.CONST NPE.RET NPE.RET.UTIL NPE.STAT RI.IGNOREDCALL RI.IGNOREDNEW RR.IGNORED SV.INT_OVF
LLM08: Hidden Context Exposure	JAVA.DEBUG.ENTRY JAVA.SV.LLM.PROMPT.SECRET SV.EXPOSE.FIELD SV.EXPOSE.IFIELD SV.EXPOSE.MUTABLEFIELD SV.EXPOSE.RET SV.EXPOSE.STORE SV.IL.DEV SV.IL.FILE SV.PASSWD.HC SV.PASSWD.HC.EMPTY SV.PASSWD.HC.MINLEN SV.PASSWD.PLAIN SV.PASSWD.PLAIN.HC SV.SENSITIVE.DATA SV.SENSITIVE.OBJ SV.STRBUF.CLEAN UMC.SYSERR UMC.SYSOUT
LLM09: Vector and Embedding Weaknesses	JAVA.SV.EMAIL.HOST JAVA.SV.LLM.VECTOR.NOFILTER JD.INF.ALLOC RLK.NIO RLK.SOCK RLK.SQLCON RLK.SQLOBJ SV.DATA.DB SV.DOS.ARRINDEX SV.DOS.ARRSIZE SV.ECV SV.ECV.TRUSTMANAGER SV.INT_OVF SV.SQL SV.SQL.DBSOURCE SV.TAINT SV.TAINT_NATIVE SV.WEAK.CRYPT SV.WEAK.KEYS.AES SV.WEAK.KEYS.DH SV.WEAK.KEYS.DSA SV.WEAK.KEYS.EC SV.WEAK.KEYS.RSA SV.WEAK.TLS
LLM10: Improper Output Handling	JAVA.SV.XML.INVALID RI.IGNOREDCALL RR.IGNORED SV.DATA.DB SV.EXEC SV.EXEC.DIR SV.EXEC.ENV SV.EXEC.LOCAL SV.EXEC.PATH SV.HTTP_SPLIT SV.LOG_FORGING SV.PATH SV.PATH.INJ SV.SCRIPT SV.SQL SV.SQL.DBSOURCE SV.SSRF.URI SV.TAINT SV.TAINT_NATIVE SV.XPATH SV.XSS.DB SV.XSS.REF