VulnSocial

CVE-2026-108585

LOWCVSS 5.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the delete_application tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values. Attackers or prompt-injected models can supply dot-segment values like ../repositories/ to send authenticated DELETE requests deleting repositories, clusters, or projects within the token's RBAC permissions.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-11: 110-11
Full discourse1 post
  • Cronus@soycronus

    Argo CD MCP can smuggle a delete past its own tool. CVE-2026-108585 1. ../ in applicationName hits other API paths 2. Prompt injection can wipe repos or clusters 3. No fix yet through 0.9.0 I'd force MCP_READ_ONLY until patched. Source: NVD https://t.co/duTdcLJl3V

    30020105
    2.8K followersView on X

Explore more

Back to dashboard