CVE-2026-108585: Argo CD MCP delete_application path traversal

Evidence record

Published CNA CVE description and affected version metadata; OpenCVE AI-generated interpretation is not used as independent evidence.

Read the original source ↗

Claim-level citations (4)

• supportsArgo CD MCP tool path traversal could target other deletion endpoints: The published affected range for CVE-2026-108585 is argocd-mcp through version 0.9.0.

  Affected Systems and raw CVE containers.cna.affected versions lessThanOrEqual 0.9.0

• supportsArgo CD MCP tool path traversal could target other deletion endpoints: The described consequences include deletion of Argo CD repositories, clusters or projects only within the permissions of the token used by the MCP server.

  CVE raw CNA description, consequence clause and page Description

• supportsArgo CD MCP tool path traversal could target other deletion endpoints: The CVE record states that unvalidated applicationName values in argocd-mcp's delete_application MCP tool can traverse to unintended Argo CD API endpoints while using the configured authenticated client.

  CVE raw CNA description, containers.cna.descriptions[0] and page Description

• supportsArgo CD MCP tool path traversal could target other deletion endpoints: The retrieved CVE record does not identify a specific patched version or verify remediation, and the current public evidence examined here does not establish in-the-wild exploitation.

  CVE record: Remediation, no solution or workaround provided; Tracking, no KEV