OWASP LLM Top 10: RAG TM report

# RAG

11/25/2025, 11:32:33 AM

## Diagram

<svg width="1650px" height="1275px" viewBox="0 0 1650 1275" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" style="width: 1650px; height: 1275px;"><g transform="matrix(1, 0, 0, 1, 0, 0)" clip-path="url(#mainClip24242)"><g transform="matrix(1, 0, 0, 1,[PII_REDACTED]999974,[PII_REDACTED]9669145)"><g transform="matrix(1, 0, 0, 1,[PII_REDACTED]013354,[PII_REDACTED]455596)"><path d="M 0,[PII_REDACTED]4725386 C 88[PII_REDACTED]9377,84[PII_REDACTED]6[PII_REDACTED][PII_REDACTED],36[PII_REDACTED]0[PII_REDACTED][PII_REDACTED],0" fill="none" stroke="black" stroke-width="1" stroke-linecap="butt" stroke-linejoin="miter" stroke-miterlimit="10" transform="matrix(1, 0, 0, 1, 5, 5)"></path><path d="M 0,0 L 8,4 L 0,8 L 2,4 z" fill="black" stroke="none" transform="matrix(0.[PII_REDACTED], -0[PII_REDACTED]7494923, 0[PII_REDACTED]7494923, 0.[PII_REDACTED],[PII_REDACTED]5982676, 4.[PII_REDACTED])"></path><path d="M 0,0 L 8,4 L 0,8 L 2,4 z" fill="none" stroke="black" stroke-width="1" stroke-linecap="butt" stroke-linejoin="miter" stroke-miterlimit="10" transform="matrix(0.[PII_REDACTED], -0[PII_REDACTED]7494923, 0[PII_REDACTED]7494923, 0.[PII_REDACTED],[PII_REDACTED]5982676, 4.[PII_REDACTED])"></path><path d="M 8,0 L 6,4 L 8,8 L 0,4 z" fill="black" stroke="none" transform="matrix(0.[PII_REDACTED], -0.[PII_REDACTED], 0.[PII_REDACTED], 0.[PII_REDACTED], 3.[PII_REDACTED],[PII_REDACTED]4196267)"></path><path d="M 8,0 L 6,4 L 8,8 L 0,4 z" fill="none" stroke="black" stroke-width="1" stroke-linecap="butt" stroke-linejoin="miter" stroke-miterlimit="10" transform="matrix(0.[PII_REDACTED], -0.[PII_REDACTED], 0.[PII_REDACTED], 0.[PII_REDACTED], 3.[PII_REDACTED],[PII_REDACTED]4196267)"></path><g transform="matrix(1, 0, 0, 1, 90[PII_REDACTED]093, 55[PII_REDACTED]991)"><path d="M 5,0 L 82[PII_REDACTED]2044,0 C 84[PII_REDACTED]6648,0 87[PII_REDACTED]2044,2[PII_REDACTED]53968 87[PII_REDACTED]2044,5 L 87[PII_REDACTED]2044,22[PII_REDACTED]22 C 87[PII_REDACTED]2044,24[PII_REDACTED]68032 84[PII_REDACTED]6648,27[PII_REDACTED]22 82[PII_REDACTED]2044,27[PII_REDACTED]22 L 5,27[PII_REDACTED]22 C 2[PII_REDACTED]53968,27[PII_REDACTED]22 0,24[PII_REDACTED]68032 0,22[PII_REDACTED]22 L 0,5 C 0,2[PII_REDACTED]53968 2[PII_REDACTED]53968,0 5,0 z" fill="#ffffff" stroke="none" transform="matrix(1, 0, 0, 1, 0.5, 0.5)"></path><text x="38[PII_REDACTED]5625" y="1[PII_REDACTED]10547" style="font: 14px Poppins" text-anchor="middle" fill="black" stroke="none" transform="matrix(1, 0, 0, 1, 6[PII_REDACTED]53975, 6[PII_REDACTED]53968)">User Query</text></g></g><g transform="matrix(1, 0, 0, 1,[PII_REDACTED]056257,[PII_REDACTED]453617)"><path d="M 9[PII_REDACTED]3095,97[PII_REDACTED]5944 C -0[PII_REDACTED]75458052,66[PII_REDACTED]9738 -2.[PII_REDACTED],33[PII_REDACTED]977 2[PII_REDACTED]76336,0" fill="none" stroke="black" stroke-width="1" stroke-linecap="butt" stroke-linejoin="miter" stroke-miterlimit="10" transform="matrix(1, 0, 0, 1, 55[PII_REDACTED]53665, 5)"></path><path d="M 0,0 L 8,4 L 0,8 L 2,4 z" fill="black" stroke="none" transform="matrix(0[PII_REDACTED]0880126, -0.[PII_REDACTED], 0.[PII_REDACTED], 0[PII_REDACTED]0880126, 52[PII_REDACTED]1475, 12[PII_REDACTED]5074)"></path><path d="M 0,0 L 8,4 L 0,8 L 2,4 z" fill="none" stroke="black" stroke-width="1" stroke-linecap="butt" stroke-linejoin="miter" stroke-miterlimit="10" transform="matrix(0[PII_REDACTED]0880126, -0.[PII_REDACTED], 0.[PII_REDACTED], 0[PII_REDACTED]0880126, 52[PII_REDACTED]1475, 12[PII_REDACTED]5074)"></path><path d="M 8,0 L 6,4 L 8,8 L 0,4 z" fill="black" stroke="none" transform="matrix(-0[PII_REDACTED]6324633, -0.[PII_REDACTED], 0.[PII_REDACTED], -0[PII_REDACTED]6324633, 6[PII_REDACTED]447,[PII_REDACTED]2085513)"></path><path d="M 8,0 L 6,4 L 8,8 L 0,4 z" fill="none" stroke="black" stroke-width="1" stroke-linecap="butt" stroke-linejoin="miter" stroke-miterlimit="10" transform="matrix(-0[PII_REDACTED]6324633, -0.[PII_REDACTED], 0.[PII_REDACTED], -0[PII_REDACTED]6324633, 6[PII_REDACTED]447,[PII_REDACTED]2085513)"></path><g transform="matrix(1, 0, 0, 1, 0, 40[PII_REDACTED]94556)"><path d="M 5,0 L[PII_REDACTED]4635481,0 C[PII_REDACTED]9720085,0[PII_REDACTED]4635481,2[PII_REDACTED]53[PII_REDACTED][PII_REDACTED],5 L[PII_REDACTED]4635481,22[PII_REDACTED]22 C[PII_REDACTED]4635481,24[PII_REDACTED]68[PII_REDACTED][PII_REDACTED],27[PII_REDACTED]22[PII_REDACTED]4635481,27[PII_REDACTED]22 L 5,27[PII_REDACTED]22 C 2[PII_REDACTED]53968,27[PII_REDACTED]22 0,24[PII_REDACTED]68032 0,22[PII_REDACTED]22 L 0,5 C 0,2[PII_REDACTED]53968 2[PII_REDACTED]53968,0 5,0 z" fill="#ffffff" stroke="none" transform="matrix(1, 0, 0, 1, 0.5, 0.5)"></path><text x="49[PII_REDACTED]2344" y="1[PII_REDACTED]10547" style="font: 14px Poppins" text-anchor="middle" fill="black" stroke="none" transform="matrix(1, 0, 0, 1, 6[PII_REDACTED]53975, 6[PII_REDACTED]53968)">Process Query</text></g></g><g transform="matrix(1, 0, 0, 1,[PII_REDACTED]284531, 5[PII_REDACTED]70937)"><path d="M 4[PII_REDACTED]24566,[PII_REDACTED]7044547 C 16[PII_REDACTED]68556,[PII_REDACTED]7873598 2.[PII_REDACTED],95[PII_REDACTED]4538 0,0" fill="none" stroke="black" stroke-width="1" stroke-linecap="butt" stroke-linejoin="miter" stroke-miterlimit="10" transform="matrix(1, 0, 0, 1, 58[PII_REDACTED]5161, 5)"></path><path d="M 0,0 L 8,4 L 0,8 L 2,4 z" fill="black" stroke="none" transform="matrix(-0[PII_REDACTED]43448066, -0.[PII_REDACTED], 0.[PII_REDACTED], -0[PII_REDACTED]43448066, 54[PII_REDACTED]8686, 13[PII_REDACTED]39904)"></path><path d="M 0,0 L 8,4 L 0,8 L 2,4 z" fill="none" stroke="black" stroke-width="1" stroke-linecap="butt" stroke-linejoin="miter" stroke-miterlimit="10" transform="matrix(-0[PII_REDACTED]43448066, -0.[PII_REDACTED], 0.[PII_REDACTED], -0[PII_REDACTED]43448066, 54[PII_REDACTED]8686, 13[PII_REDACTED]39904)"></path><path d="M 8,0 L 6,4 L 8,8 L 0,4 z" fill="black" stroke="none" transform="matrix(-0.[PII_REDACTED], -0[PII_REDACTED]27677, 0[PII_REDACTED]27677, -0.[PII_REDACTED], 95[PII_REDACTED]7896,[PII_REDACTED]7002367)"></path><path d="M 8,0 L 6,4 L 8,8 L 0,4 z" fill="none" stroke="black" stroke-width="1" stroke-linecap="butt" stroke-linejoin="miter" stroke-miterlimit="10" transform="matrix(-0.[PII_REDACTED], -0[PII_REDACTED]27677, 0[PII_REDACTED]27677, -0.[PII_REDACTED], 95[PII_REDACTED]7896,[PII_REDACTED]7002367)"></path><g transform="matrix(1, 0, 0, 1, 0,[PII_REDACTED]411502)"><path d="M 5,0 L[PII_REDACTED]4537824,0 C[PII_REDACTED]9622426,0[PII_REDACTED]4537824,2[PII_REDACTED]53[PII_REDACTED][PII_REDACTED],5 L[PII_REDACTED]4537824,22[PII_REDACTED]22 C[PII_REDACTED]4537824,24[PII_REDACTED]68[PII_REDACTED][PII_REDACTED],27[PII_REDACTED]22[PII_REDACTED]4537824,27[PII_REDACTED]22 L 5,27[PII_REDACTED]22 C 2[PII_REDACTED]53968,27[PII_REDACTED]22 0,24[PII_REDACTED]68032 0,22[PII_REDACTED]22 L 0,5 C 0,2[PII_REDACTED]53968 2[PII_REDACTED]53968,0 5,0 z" fill="#ffffff" stroke="none" transform="matrix(1, 0, 0, 1, 0.5, 0.5)"></path><text x="64[PII_REDACTED]3516" y="1[PII_REDACTED]10547" style="font: 14px Poppins" text-anchor="middle" fill="black" stroke="none" transform="matrix(1, 0, 0, 1, 6[PII_REDACTED]53954, 6[PII_REDACTED]53968)">Request Response</text></g></g><g transform="matrix(1, 0, 0, 1,[PII_REDACTED]292719, [PII_REDACTED]5611163)"><path d="M 0,62[PII_REDACTED]5372 C 49[PII_REDACTED]23376,30.2740