Supply chain risk in LLM systems spans model providers, training datasets, plugin ecosystems, and software dependencies. Compromised upstream assets can silently alter downstream behavior and security posture. Because these systems are compositional, trust assumptions must be continuously validated.
Continuously verify component provenance, enforce dependency pinning, and audit vendor security controls. Use isolated execution boundaries for third-party integrations and maintain incident-ready rollback processes. Integrate supply-chain checks into CI/CD and release governance workflows.
The same feature written the risky way, then with the fix applied.
How this risk has ranked in each OWASP release.
2025Latest
#03llm03-2025 Supply Chain
