OWASP LLM06 (2023) Sensitive Information Disclosure

What is OWASP LLM06 (2023) Sensitive Information Disclosure?

Sensitive information disclosure in 2023 covered regurgitation of private training data, verbose errors, and answers that expose more than the user should access.

What this looks like in production

Promoted to LLM02 in 2025 as conversational extraction and agent tool abuse became common production failure modes.

Further reading on Giskard

• OWASP Top 10 for LLM 2023: the original developer checklist
• Cross Session Leak: when your AI assistant becomes a data breach
• Healthcare data leakage from an agentic transcription tool

Official OWASP reference