OWASP GenAI Q1 2026 Exploit Round-up Report

AI ecosystem (sector-wide report covering January 1 - April 11, 2026)

Documents the transition from theoretical risks to active exploitation; 520 reported tool misuse and privilege escalation incidents in 2026; prompt injection with 450 incidents; highlights Anthropic Claude abuse in the 150GB Mexican government data theft as the period's prominent case; notes a growing gap between traditional CVE-based vulnerability management and architectural AI risks that never receive CVE IDs

Report synthesis; attackers target agent identities, orchestration layers, and supply chains rather than just model outputs