 OWASP. org 8 | OWASP Top 10 for LLM v1. 0 Example Attack Scenarios An application utilizes an LLM plugin to generate responses for a chatbot feature.  However, the application directly passes the LLM-generated response into an internal function responsible for executing system commands without proper validation.  This allows an attacker to manipulate the LLM output to execute arbitrary commands on the underlying system, leading to unauthorized access or unintended system modifications A user utilizes a website summarizer tool powered by a LLM to generate a concise summary of an article