Skip to content
OpenAdvisories

Product · argoproj

argocd-mcp

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-108585

    argocd-mcp through 0.9.0 Path Traversal via delete_application Tool

    argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the delete_application tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values. Attackers or prompt-injected models can supp…

    argoproj argocd-mcp