{"data":{"id":"92e04b51-9f37-4983-8a00-7fe70d70985b","title":"FinBot CTF Is Live: A Hands-On Companion to the OWASP GenAI Security Project","summary":"The OWASP GenAI Security Project has launched FinBot, a hands-on Agentic Security capture-the-flag platform that is part of its Agentic Security Initiative. FinBot simulates a multi-agent vendor management platform with autonomous onboarding, fraud detection, invoice processing and communications, all powered by LLMs with real tool access. Its challenges cover prompt injection, tool misuse, policy bypass, data exfiltration, privilege escalation and remote code execution, mapped to the OWASP Top 10 for LLM Applications, the OWASP Top 10 for Agentic Applications, CWE and MITRE ATLAS.","solution":"N/A -- no mitigation discussed in source.","labels":["research","security"],"sourceUrl":"https://genai.owasp.org/2026/04/28/finbot-ctf-is-live-a-hands-on-companion-to-the-owasp-genai-security-project/?utm_source=rss&utm_medium=rss&utm_campaign=finbot-ctf-is-live-a-hands-on-companion-to-the-owasp-genai-security-project","publishedAt":"2026-04-28T15:04:03.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["prompt_injection","jailbreak"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["FinBot","OWASP GenAI Security Project","OWASP Top 10 for Agentic Applications 2026","OWASP Top 10 for LLM Applications","MITRE ATLAS"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-04-28T15:04:03.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","safety"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":"industry","atlasIds":["AML.T0051","AML.T0054"]}}