Unbounded Consumption refers to the process where an LLM generates excessive, uncontrolled output — or where an application allows excessive, uncontrolled inference requests — consuming compute, memory, bandwidth, and financial budgets in ways that degrade service, cause outages, or enable model theft.
LLM10 in the 2023 OWASP list was called “Model Denial of Service.” The 2025 version broadens it: the threat isn’t just crashing the service — it’s financial ruin, model theft, and degradation for all users. The new name captures the full picture.