{"data":{"id":"bc60f397-a7a3-4212-82c3-15cfb27e3780","title":"OWASP Gen AI Incident & Exploit Round-up, Q2’25","summary":"OWASP's Q2 2025 Gen AI Incident & Exploit Round-up (March to June 2025) is a semi-regular roundup of documented exploits and vulnerability research involving generative AI. Its featured entry describes a GPT-4.1 jailbreak via tool poisoning, in which attackers embedded malicious instructions in tool descriptions, causing the model to perform unauthorized actions such as data exfiltration without user awareness. The entry maps the attack to several OWASP Top 10 for LLM categories, including LLM01 Prompt Injection and LLM07 Insecure Plugin Design.","solution":"Implement strict validation and sanitization of tool descriptions. Establish permissions and access controls for tool integrations. Monitor AI behavior for anomalies during tool execution. Educate developers on secure integration practices.","labels":["security","safety"],"sourceUrl":"https://genai.owasp.org/2025/07/14/owasp-gen-ai-incident-exploit-round-up-q225/?utm_source=rss&utm_medium=rss&utm_campaign=owasp-gen-ai-incident-exploit-round-up-q225","publishedAt":"2025-07-14T20:39:32.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["jailbreak","prompt_injection"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI"],"affectedVendorsRaw":["GPT-4.1","ChatGPT","Model Context Protocol (MCP)","DeepSeek","NVIDIA TensorRT-LLM","McDonald's AI hiring bot","M365 Copilot"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2025-07-14T20:39:32.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","safety"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":"industry","atlasIds":["AML.T0051","AML.T0054"]}}