CVE-2026-108585: Argoproj-Labs Argocd-Mcp

Medium severity, CVSS 5.4.

argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the delete_application tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values. Attackers or prompt-injected models can supply dot-segment values like ../repositories/ to send authenticated DELETE requests deleting repositories, clusters, or projects within the token's RBAC permissions.

Affected products

• Argoproj-Labs Argocd-Mcp: up to and including 0.9.0

Published 2026-10-10. Last modified 2026-10-10.