Is CVE-2026-108585 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-108585?

CVE-2026-108585 has a CVSS v3 severity of MEDIUM (5.4).

Back

CVE-2026-108585

Description

argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the delete_application tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values. Attackers or prompt-injected models can supply dot-segment values like ../repositories/ to send authenticated DELETE requests deleting repositories, clusters, or projects within the token's RBAC permissions.