MIT AI Risk Repository
Browse AI risks
2,500 risk entries extracted from 74 frameworks, coded by domain, subdomain, causal entity, intent and timing. Filter, then export the current selection with its licence and citation attached.
-
—
-
70.04.00 · Risk Category
-
-
—
-
—
-
—
-
71.01.00 · Risk Category
-
-
—
-
—
-
—
-
—
-
—
-
"Uncontrolled AI self- improvement; Quantum security"
-
71.02.00 · Risk Category
"Whether the risk originates from malicious intent or is an unintended consequence of legitimate task objectives"
-
"Unpredictable and unforeseen outcomes from purposeful actions"
-
—
-
71.03.00 · Risk Category
-
-
—
-
"Damage to individual well-being or public health"
-
—
-
"Dramatically change the social and economic status"
-
—
-
72.01.00a · Additional evidence
—
-
—
-
—
-
—
-
72.02.00a · Additional evidence
—
-
—
-
—
-
72.03.00a · Additional evidence
—
-
72.03.00b · Additional evidence
—
-
72.04.00 · Risk Category
"Systemic risks emerge from widespread deployment of general-purpose AI beyond the risks directly posed by capabilities of individual models. These risks arise from structural mismatches between AI technology and existing social, economic, and institutional frameworks, creating vulnerabilities that transcend individual model-level interventions and require coordinated industry-wide and societal-level responses."
-
72.04.00a · Additional evidence
—
-
72.06.00 · Risk Category
-
-
73.03.02a · Additional evidence
Dual-Use Capabilities Enable Malicious Use and Misuse of LLMs
Cybersecurity
—
-
73.03.02b · Additional evidence
Dual-Use Capabilities Enable Malicious Use and Misuse of LLMs
Cybersecurity
—
-
73.03.02c · Additional evidence
Dual-Use Capabilities Enable Malicious Use and Misuse of LLMs
Cybersecurity
—
-
73.03.05a · Additional evidence
Dual-Use Capabilities Enable Malicious Use and Misuse of LLMs
Hazardous Biological and Chemical Technologies
—
-
73.04.00 · Risk Category
"A key desideratum for an LLM from a user’s perspective is ‘trustworthiness’, i.e. assurance of reliability and consistent performance, and absence of any accidental harm caused by the technology to the user.16 Providing assurance that an LLM-based system will not cause accidental harm remains a major open challenge. Harms may either occur directly due to the flawed nature of LLMs, e.g. an LLM generating toxic language or behaving inappropriately in some other ways, or may occur due to improper usage by a user, e.g. automation bias due to a user’s overreliance on LLM."
-
73.04.01a · Additional evidence
LLM-Systems Can Be Untrustworthy
Harms of Representation and Other Biases
—
-
73.04.02a · Additional evidence
LLM-Systems Can Be Untrustworthy
Inconsistent Performance across and within Domains
—
-
—
-
73.05.00 · Risk Category
"The rapid evolution of LLMs brings significant socioeconomic opportunities and challenges, impacting the workforce, income inequality, education, and global economic development. Many of these challenges are systemic in nature, constituting what economists refer to as general equilibrium effects. These challenges do not arise directly from LLMs causing harm to users but rather from their indirect effects on the socioeconomic equilibrium."
-
73.05.00a · Additional evidence
—
-
73.05.01a · Additional evidence
Socioeconomic Impacts of LLM May Be Highly Disruptive
Effects on the Workforce
—
-
73.05.01b · Additional evidence
Socioeconomic Impacts of LLM May Be Highly Disruptive
Effects on the Workforce
—
-
73.05.03a · Additional evidence
Socioeconomic Impacts of LLM May Be Highly Disruptive
Global Economic Development
—
-
73.07.03 · Risk Sub-Category
Jailbreaks and Prompt Injections Threaten Security of LLMs
Adversarial Optimization:
"Jailbreak attacks can be discovered by performing manual or auto- mated adversarial optimization against a proxy objective that is noisily correlated with the success of a jailbreak. These are mostly gradient-based attacks (Zou et al., 2023b; Shin et al., 2020) as described in the previous two challenges, but gradient-free methods also exist (Prasad et al., 2022; Deng et al., 2022; Lapid et al., 2023)."
-
—
-
—
-
—
Disclaimer: informational only, not legal advice. Verify every claim against the linked official sources and consult a qualified lawyer before acting.
Frequently asked questions
Where do these risk entries come from?
The MIT AI Risk Repository, which extracts risks from dozens of published frameworks, taxonomies and papers and codes each one by domain and subdomain, and by a causal taxonomy of entity, intent and timing. This is a browseable copy, attributed and openly licensed, not original research.
What do entity, intent and timing mean?
They are the causal coding. Entity is whether a human or the AI system is the cause; intent is whether the harm was intentional or not; timing is whether it arises before or after deployment. Together they let you separate misuse from malfunction.
Can I export the results?
Yes, any filtered set exports as CSV or JSON, and every export carries the upstream source, licence and citation with it, because attribution is a condition of the licence rather than a courtesy.
What is the MIT AI Risk Repository?
A living database of AI risks extracted from published frameworks, taxonomies and papers, classified by a causal taxonomy of entity, intent and timing and by a domain taxonomy of seven domains and 24 subdomains. It is published by the MIT AI Risk Initiative under CC BY 4.0.