AI Security Atlas › All entries › LLM Application & Output Security

VulnerabilityMedium severity

Interface Invites Overreliance

The product presents AI output as authoritative: no uncertainty cues, no labels, no prompt to verify before acting.

Open in the interactive atlas →

Impact

Users skip verification because the interface signals that none is needed.

Why this severity

Impact Medium × Likelihood Medium = Medium

Impact medium: amplifies other errors rather than causing them. Likelihood medium: many products label AI output, few add friction before action.

Impact Medium: Limited or recoverable harm: cost, availability, reputational damage, or exposure confined to one session or user.
Likelihood Medium: Publicly demonstrated against real products or in peer-reviewed research, or seen in the wild only with a prior foothold such as stolen credentials.

Method: OWASP Risk Rating Methodology

Related

Exploited by

Mitigated by

Remediation

  1. Label AI-generated content and show its sources inline.
  2. Surface confidence or coverage signals where they are meaningful.
  3. Add friction (confirm, review) before users act on high-stakes answers.

How to verify

Framework mapping

OWASP Top 10 for LLM Applications 2025

OWASP Top 10 for Agentic Applications 2026

NIST AI RMF 1.0