Source directory MITRE 2026.09

MITRE ATLAS data

“MITRE ATLAS data”. Publisher: MITRE. Version used: 2026.09. The Versatile AI Risk Assessment threat catalogue backs 44 of its 52 threats with this document, at 36 verified locations.

As of: October 2026 · Catalogue version 2026.10.24.2

Document details

Publisher: MITRE
Version used: 2026.09
Framework: MITRE ATLAS

Open the original document at the publisher External link; the publisher’s version always takes precedence.

References in the catalogue (36)

Every row states the clause, its title, the exact location in the document and the threats that refer to it.

Clauses of this document with the threats that reference them
Clause	Title and location	Referencing threats
`AML.T0002`	Acquire Public AI Artifacts ATLAS-2026.09.yaml technique object with id AML.T0002 (content release 2026.09, format-version 6.0.0)	Model Reconnaissance
`AML.T0010`	AI Supply Chain Compromise ATLAS-2026.09.yaml technique object with id AML.T0010 (content release 2026.09, format-version 6.0.0)	Supply Chain – Infrastructure Supply Chain – Models Supply Chain – Datasets Middleware Exploits (AI Framework Attacks)
`AML.T0014`	Discover AI Model Family ATLAS-2026.09.yaml technique object with id AML.T0014 (content release 2026.09, format-version 6.0.0)	Model Reconnaissance
`AML.T0015`	Evade AI Model ATLAS-2026.09.yaml technique object with id AML.T0015 (content release 2026.09, format-version 6.0.0)	Adversarial Inputs Multimodal Attacks
`AML.T0018`	Manipulate AI Model ATLAS-2026.09.yaml technique object with id AML.T0018 (content release 2026.09, format-version 6.0.0)	Backdoor ML Model Sleepy Agent (Time/Event-Triggered Hidden Instructions)
`AML.T0020`	Training Data Poisoning ATLAS-2026.09.yaml technique object with id AML.T0020 (content release 2026.09, format-version 6.0.0)	Training Data Poisoning Targeted Poisoning / Label Poisoning Sleepy Agent (Time/Event-Triggered Hidden Instructions)
`AML.T0024`	Exfiltration via AI Inference API ATLAS-2026.09.yaml technique object with id AML.T0024 (content release 2026.09, format-version 6.0.0)	Exfiltration from ML Application
`AML.T0024.000`	Infer Training Data Membership ATLAS-2026.09.yaml technique object with id AML.T0024.000 (content release 2026.09, format-version 6.0.0)	Privacy Attacks
`AML.T0024.001`	Invert AI Model ATLAS-2026.09.yaml technique object with id AML.T0024.001 (content release 2026.09, format-version 6.0.0)	Privacy Attacks
`AML.T0025`	Exfiltration via Cyber Means ATLAS-2026.09.yaml technique object with id AML.T0025 (content release 2026.09, format-version 6.0.0)	Exfiltration from ML Application Cross-Tenant Leakage (Multi-Tenant Vector DB)
`AML.T0029`	Denial of AI Service ATLAS-2026.09.yaml technique object with id AML.T0029 (content release 2026.09, format-version 6.0.0)	Model Denial of Service Application Denial of Service
`AML.T0034`	Cost Harvesting ATLAS-2026.09.yaml technique object with id AML.T0034 (content release 2026.09, format-version 6.0.0)	Cost Harvesting / Repurposing
`AML.T0040`	AI Model Inference API Access ATLAS-2026.09.yaml technique object with id AML.T0040 (content release 2026.09, format-version 6.0.0)	Model Theft Model Reconnaissance Side-Channel Attacks (Timing Analysis)
`AML.T0043`	Craft Adversarial Data ATLAS-2026.09.yaml technique object with id AML.T0043 (content release 2026.09, format-version 6.0.0)	Multimodal Attacks
`AML.T0044`	Full AI Model Access ATLAS-2026.09.yaml technique object with id AML.T0044 (content release 2026.09, format-version 6.0.0)	Model Theft
`AML.T0048`	External Harms ATLAS-2026.09.yaml technique object with id AML.T0048 (content release 2026.09, format-version 6.0.0)	Insecure Output Handling Excessive Agency MCP Hijacking (Model Context Protocol)
`AML.T0048.002`	Societal Harm ATLAS-2026.09.yaml technique object with id AML.T0048.002 (content release 2026.09, format-version 6.0.0)	Hate Speech and Discrimination Sexual Content Violence / Unsafe Actions Controversial Topics Illegal Activities Self-harm Harassment Unethical Actions Social Engineering Fraud Disinformation
`AML.T0049`	Exploit Public-Facing Application ATLAS-2026.09.yaml technique object with id AML.T0049 (content release 2026.09, format-version 6.0.0)	Application Vulnerabilities Middleware Exploits (AI Framework Attacks)
`AML.T0051`	LLM Prompt Injection ATLAS-2026.09.yaml technique object with id AML.T0051 (content release 2026.09, format-version 6.0.0)	Agentic AI / Autonomous Agents RAG-Specific Attacks (Document Poisoning)Multimodal Attacks MCP Hijacking (Model Context Protocol)
`AML.T0051.000`	Direct ATLAS-2026.09.yaml technique object with id AML.T0051.000 (content release 2026.09, format-version 6.0.0)	Prompt Injection – Direct
`AML.T0051.001`	Indirect ATLAS-2026.09.yaml technique object with id AML.T0051.001 (content release 2026.09, format-version 6.0.0)	Prompt Injection – Indirect
`AML.T0053`	AI Agent Tool Invocation ATLAS-2026.09.yaml technique object with id AML.T0053 (content release 2026.09, format-version 6.0.0)	Insecure Tool Design MCP Hijacking (Model Context Protocol)
`AML.T0054`	LLM Jailbreak ATLAS-2026.09.yaml technique object with id AML.T0054 (content release 2026.09, format-version 6.0.0)	Jailbreaks
`AML.T0056`	Extract LLM System Prompt ATLAS-2026.09.yaml technique object with id AML.T0056 (content release 2026.09, format-version 6.0.0)	Meta Prompt Extraction
`AML.T0057`	LLM Data Leakage ATLAS-2026.09.yaml technique object with id AML.T0057 (content release 2026.09, format-version 6.0.0)	Sensitive Information Disclosure Cross-Tenant Leakage (Multi-Tenant Vector DB)
`AML.T0073`	Impersonation ATLAS-2026.09.yaml technique object with id AML.T0073 (content release 2026.09, format-version 6.0.0)	Insecure Inter-Agent Communication (A2A/MCP)
`AML.T0080.000`	Memory ATLAS-2026.09.yaml technique object with id AML.T0080.000 (content release 2026.09, format-version 6.0.0)	Agent Memory Poisoning (Persistent Context)
`AML.T0109`	AI Supply Chain Rug Pull ATLAS-2026.09.yaml technique object with id AML.T0109 (content release 2026.09, format-version 6.0.0)	Middleware Exploits (AI Framework Attacks)MCP Hijacking (Model Context Protocol)
`AML.T0110`	AI Agent Tool Poisoning ATLAS-2026.09.yaml technique object with id AML.T0110 (content release 2026.09, format-version 6.0.0)	Insecure Inter-Agent Communication (A2A/MCP)
`AML.T0110.000`	Definition and Instructions ATLAS-2026.09.yaml technique object with id AML.T0110.000 (content release 2026.09, format-version 6.0.0)	MCP Hijacking (Model Context Protocol)
`AML.T0110.001`	Implementation ATLAS-2026.09.yaml technique object with id AML.T0110.001 (content release 2026.09, format-version 6.0.0)	MCP Hijacking (Model Context Protocol)
`AML.T0115.000`	Datasets ATLAS-2026.09.yaml technique object with id AML.T0115.000 (content release 2026.09, format-version 6.0.0)	Supply Chain – Datasets
`AML.T0115.001`	Models ATLAS-2026.09.yaml technique object with id AML.T0115.001 (content release 2026.09, format-version 6.0.0)	Supply Chain – Models
`AML.T0115.002`	AI Agent Tools ATLAS-2026.09.yaml technique object with id AML.T0115.002 (content release 2026.09, format-version 6.0.0)	MCP Hijacking (Model Context Protocol)
`AML.T0129`	Triggers in Multimodal Inputs ATLAS-2026.09.yaml technique object with id AML.T0129 (content release 2026.09, format-version 6.0.0)	Multimodal Attacks
`AML.T0132`	Misconfigured or Publicly Exposed AI Services ATLAS-2026.09.yaml technique object with id AML.T0132 (content release 2026.09, format-version 6.0.0)	Supply Chain – Infrastructure

This page does not reproduce the text of the standards. It states the identifier, title and location of the clause; the wording itself is in the original document. The mappings are taxonomic and not evidence of compliance.

Threats referencing this document (44)

Grouped by topic. Every entry leads to the full threat page.

Agentic and Autonomous AI

Application and Integration Security

Attacks on the Running Model and Service

Harmful Content

Malicious Use for Attacks, Fraud and Disinformation

Model and Training Data Manipulation

Privacy and Data Leakage

Prompt Attacks and Guardrail Evasion

Supply Chain and Provenance

From the reference to the assessment

The full catalogue states the mitigations, the possible impact and every verified location for each threat. The live demo runs locally in your browser, with no sign-up.

Go to the threat catalogue Start the live demo

Cite this page

For reports, policies or internal documents; the link leads directly to this source page.

“MITRE ATLAS data” (MITRE). References in the AI threat catalogue, Versatile AI Risk Assessment, as of October 2026.
https://www.versatile-ai-risk-assessment.com/en/wissensbasis/sources/mitre-atlas/

← Back to the source directory