Insecure plugin or tool integration grants models pathways to execute high-impact operations without adequate authorization boundaries. Attackers chain prompt abuse with permissive tool capabilities to exfiltrate data or perform unauthorized actions. Weak input validation and broad permission scopes make these systems highly exploitable.
Restrict tool permissions to least privilege and require explicit policy checks per action. Validate and sanitize tool inputs and outputs, and block high-risk operations by default. Introduce approval gates for irreversible or sensitive workflows and monitor tool-use telemetry for abuse patterns.
The same feature written the risky way, then with the fix applied.
How this risk has ranked in each OWASP release.
2024Latest
#07llm07-2024 Insecure Plugin Design
