argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the delete_application tool that allows MCP clients to reach…
argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the delete_application tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values. Attackers or prompt-injected models can supply dot-segment values like ../repositories/ to send authenticated DELETE requests deleting repositories, clusters, or projects within the token's RBAC permissions.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Argo, Anthropic
- Product
- Argo CD / Workflows, Claude, AI / LLM tooling
- CVSS
- 5.4
- Exposure class
- Developer platform, AI infrastructure
Why it ranks 8 (Routine)
- CVSS 5.4 medium
- Product class: developer platform, AI infrastructure
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.