Mmastodon TechnologyCybersecurity first seen 3 d ago, last 3 d ago, peak #12

Path traversal flaw reported in argocd-mcp server

Original: 🚨 EUVD-2026-96372 📊 Score: 5.3/10 (CVSS v3.1) 📦 Product: argocd-mcp 🏢 Vendor: argoproj-labs 📅 Updated: 2026-10-10 📝 argo

A medium-severity vulnerability, tracked as EUVD-2026-96372 with a CVSS v3.1 score of 5.3, has been disclosed in argocd-mcp, the Argo CD MCP Server maintained by argoproj-labs. Versions through 0.9.0 contain a path traversal flaw in the delete_application tool that could let MCP clients access unintended files or paths. Users are advised to check for updated releases and apply fixes.

Why now: Security teams are tracking a newly updated vulnerability disclosure affecting a widely used DevOps tool.

argocd-mcpargoproj-labsArgo CDEUVD-2026-96372

Open on mastodon →

Evidence

• 🚨 EUVD-2026-96372 📊 Score: 5.3/10 (CVSS v3.1) 📦 Product: argocd-mcp 🏢 Vendor: argoproj-labs 📅 Updated: 2026-10-10 📝 argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the delete_application tool that allows MCP clients to reach unintended… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/1763441