Argoproj-Labs Argocd-Mcp
2 CVEs affecting Argoproj-Labs Argocd-Mcp. Latest disclosed: 2026-10-10. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-82456 | Critical | 10.0 | 2026-08-29 | argocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions without requiring caller credentials when ARGOCD_API_TOKEN is con… |
CVE-2026-108585 | Medium | 5.4 | 2026-10-10 | argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the delete_application tool that allows MCP clients to reach unintende… |