CVE-2026-82456
CriticalCVSS 10.0Summary
argocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions without requiring caller credentials when ARGOCD_API_TOKEN is configured. Attackers who can reach the listener can invoke the full tool surface using the operator's stored token to create applications, request syncs, and modify Argo CD resources.
Risk Assessment
Lack of authentication and listening on all interfaces allows unauthorized attackers to gain full control over Argo CD resources, potentially leading to deployment of malicious applications or disruption of operations.
Recommendation
Update argocd-mcp to the latest version that includes a fix. Restrict access to the listening port to trusted networks only and require authentication for all MCP sessions.
Original NVD description (English source)
argocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions without requiring caller credentials when ARGOCD_API_TOKEN is configured. Attackers who can reach the listener can invoke the full tool surface using the operator's stored token to create applications, request syncs, and modify Argo CD resources.