Agentic AI (OWASP Agentic Top 10)

An in-app AI agent with persistent memory, tool/MCP-style connectors, and sub-agents. Demonstrates the OWASP Top 10 for Agentic AI Applications (2025) adapted to a mobile client: memory poisoning, tool/MCP poisoning, confused-deputy privilege abuse, and insecure inter-agent communication.

9 vulnerabilities. OWASP Mobile: M4

VulnerabilityIDPlatformDifficultyOWASPMASVSMASWEMASTG (v2)CWE
Agent Tool Misuse / Confused Deputyagent_tool_confused_deputyAndroidiOSMEDIUMM4MASVS-AUTH-3MASVS-CODE-4MASWE-0023-CWE-441CWE-862
Agent Memory & Context Poisoningagent_memory_poisoningAndroidiOSHARDM4MASVS-CODE-4MASVS-STORAGE-1MASWE-0050-CWE-349CWE-77
Agent Task-Recovery Loop Weaponizationagent_recovery_loop_weaponizationAndroidiOSHARDM4MASVS-CODE-4MASWE-0050-CWE-693CWE-441
Agent External-State TOCTOU Swapagent_state_toctou_swapAndroidiOSHARDM4MASVS-CODE-4MASVS-STORAGE-2MASWE-0050-CWE-367CWE-345
GUI Agent Action Rebinding (Observation-Action Gap)gui_agent_action_rebindingAndroidiOSHARDM4MASVS-PLATFORM-1MASVS-CODE-4MASWE-0032-CWE-367CWE-441CWE-862
Insecure Inter-Agent Communicationinsecure_inter_agent_commsAndroidiOSHARDM4MASVS-CODE-4MASVS-NETWORK-1MASWE-0050-CWE-345CWE-290
MCP Connector Capability Attestation Absentmcp_capability_attestation_absentAndroidiOSHARDM4MASVS-AUTH-3MASVS-CODE-4MASWE-0050-CWE-290CWE-862
MCP open_url -> Arbitrary Android Intentmcp_open_url_arbitrary_intentAndroidiOSHARDM4MASVS-PLATFORM-1MASVS-CODE-4MASWE-0032MASTG-TEST-0026MASTG-TEST-0027CWE-77CWE-939CWE-862
MCP / Tool Description Poisoningmcp_tool_poisoningAndroidiOSHARDM4MASVS-CODE-4MASVS-CODE-3MASWE-0050-CWE-829CWE-77