 LLM plugins can have insecure inputs and insufficient access control.  This lack of application control makes them easier to exploit and can result in consequences like remote code execution.   LLM08: Excessive Agency LLM-based systems may undertake actions leading to unintended consequences.  The issue arises from excessive functionality, permissions, or autonomy granted to the LLM-based systems.   LLM03: Training Data Poisoning This occurs when LLM training data is tampered, introducing vulnerabilities or biases that compromise security, effectiveness, or ethical behavior