What the agent must reason about
OWASP classifications, additional vulnerability classes and the tooling groups the research identified. Extracted from repertoire/AUTONOMOUS_AGENT_CONTEXT.md.
OWASP Top 10 (2021)
IDOR/BOLA, privilege escalation, CORS, JWT attacks
weak algorithms, key management, SSL/TLS, padding oracles
SQLi, NoSQLi, OS command, SSTI, XXE, LDAP, XPath, CRLF
business logic, race conditions, state machine abuse
default accounts, headers, CORS/CSP, cloud misconfig
known CVEs, supply chain, dependency confusion
weak passwords, credential stuffing, JWT flaws, OAuth misconfig
insecure deserialization, CI/CD abuse
missing logs, log injection
URL fetching, cloud metadata, IPv4/IPv6 bypass
OWASP Top 10:2025 changes
- A02: Security Misconfiguration moved to #2 (from #5)
- A03: Software Supply Chain Failures newly elevated to top-10
OWASP API Top 10 (2023)
Additional vulnerability classes
Reflected, Stored, DOM, Blind, via file upload
Jinja2, Twig, Freemarker, Velocity
SVG uploads, DOCX/XLSX, OOB DTD
extension bypass, Content-Type, double extensions, web shell
path traversal, PHP wrappers, log poisoning
missing tokens, SameSite bypass
absolute URLs, @ syntax, hash manipulation
proto, constructor.prototype
header reflection, X-Forwarded-Host
dangling CNAMEs
introspection, authorization, injection
message injection, auth bypass
redirect_uri, state, PKCE, code interception
workflow bypass, pricing, race conditions
Java, PHP, Python, .NET gadget chains
buffer overflow, UAF, format string, integer overflow
SQLi-based, JWT alg=none, session prediction
horizontal, vertical, AD, sudo
weak ciphers, ECB, hardcoded keys, timing attacks
API keys in code, git history, logs
direct, indirect, MCP tool poisoning, semantic
reentrancy, flash loans, oracle manipulation, MEV