org 6 | OWASP Top 10 for LLM v1. 0 Example Attack Scenarios An attacker provides a direct prompt injection to an LLM-based support chatbot.  The injection contains “forget all previous instructions” and new instructions to query private data stores and exploit package vulnerabilities and the lack of output validation in the backend function to send e-mails.  This leads to remote code execution, gaining unauthorized access and privilege escalation An attacker embeds an indirect prompt injection in a webpage instructing the LLM to disregard previous user instructions and use an LLM plugin to delete the user's emails.  When the user employs the LLM to summarise this webpage, the LLM plugin deletes the user's emails A user employs an LLM to summarize a webpage containing an indirect prompt injection to disregard previous user instructions