org 7 | OWASP Top 10 for LLM v1. 0 LLM02: Insecure Output Handling Insecure Output Handling is a vulnerability that arises when a downstream component blindly accepts large language model (LLM) output without proper scrutiny, such as passing LLM output directly to backend, privileged, or client-side functions.  Since LLM- generated content can be controlled by prompt input, this behavior is similar to providing users indirect access to additional functionality.  Successful exploitation of an Insecure Output Handling vulnerability can result in XSS and CSRF in web browsers as well as SSRF, privilege escalation, or remote code execution on backend systems.  The following conditions can increase the impact of this vulnerability The application grants the LLM privileges beyond what is intended for end users, enabling escalation of privileges or remote code execution The application is vulnerable to external prompt injection attacks, which could allow an attacker to gain privileged access to a target user's environment