Sensitive information disclosure in LLM systems can occur through prompt leakage, retrieval exposure, weak output filtering, or insecure context handling. Attackers coax models into revealing secrets, internal policies, or regulated records. Leakage risk rises when broad context windows and mixed-trust data are used without strict isolation.
Minimize sensitive context in prompts and retrieval payloads, and apply layered redaction and output filtering. Segment data access by least privilege and enforce policy checks before retrieval and response emission. Log disclosure attempts and test for extraction vectors using adversarial prompt scenarios.
The same feature written the risky way, then with the fix applied.
How this risk has ranked in each OWASP release.
2025Latest
#02llm02-2025 Sensitive Information Disclosure
