CVE-2026-108585

MediumCVSS 5.4

Published: 10/10/2026(UTC)Updated: 10/10/2026(UTC)Translated: 10/10/2026(UTC)NVD NIST

Summary

argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the delete_application tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values. Attackers or prompt-injected models can supply dot-segment values like ../repositories/ to send authenticated DELETE requests deleting repositories, clusters, or projects within the token's RBAC permissions.

Risk Assessment

The risk includes unauthorized deletion of critical resources (repositories, clusters, projects) in the Argo CD environment, potentially leading to service disruption and data loss.

Recommendation

Immediately upgrade argocd-mcp to a version newer than 0.9.0 and validate/sanitize applicationName values before using them in delete operations.

Other vulnerabilities in argocd-mcp

CVE-2026-82456Critical
argocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions without requiring caller credentials when ARGOCD_API_TOKEN is configured. Attackers who can reach the listener can invoke the full tool surface using the operator's stored token to create applications, request syncs, and modify Argo CD resources.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS