Path Traversal Vulnerability in Argo CD MCP Server Affects API Access
CVE-2026-108585

5.3MEDIUM

Key Information:

Vendor

Argoproj-labs

Status
Argocd-mcp
Vendor
CVE Published:
10 October 2026

What is CVE-2026-108585?

The Argo CD MCP Server, up to version 0.9.0, is susceptible to a path traversal vulnerability that allows unauthorized clients to manipulate API endpoints through unvalidated applicationName values. By using dot-segment manipulations such as '../repositories/', attackers can send malicious DELETE requests that may delete repositories, clusters, or projects within the RBAC permissions tied to the authenticated token, leading to significant data loss and unauthorized access to critical resources.

Affected Version(s)

argocd-mcp 0 <= 0.9.0

References

https://hackmd.io/@haind/argocd-mcp-delete-application-ro...
third-party-advisory
https://github.com/argoproj-labs/mcp-for-argocd/blob/28d1...
technical-description
https://github.com/argoproj-labs/mcp-for-argocd/blob/28d1...
technical-description

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

HaiND from the Post and Telecommunication Institute of Technology
.