Tools AI Risk Radar ai-incident-0205
Incident record
Argo CD MCP application deletion can reach other resources
- Severity
- Medium
- Status
- Research
- Type
- Infra Vuln
- Target
- argocd-mcp through 0.9.0
- Actor
- researcher
- CVE
- CVE-2026-108585
What happened
A crafted application name can redirect the MCP application-deletion tool to another Argo CD deletion endpoint, such as repository deletion.
The CVE was published on 10 October; the original researcher publication date is unconfirmed. Write tools must be enabled and the caller must reach the deletion tool. The configured Argo CD token must already have permission for the resulting operation. The CNA gives CVSS 3.1 score 5.4. Patch status remains unconfirmed as of 11 October.
Sources
- CVE recordcveawg.mitre.org/api/cve/CVE-2026-108585
- Researcher disclosurehackmd.io/@haind/argocd-mcp-delete-application-route-smuggli…
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 October 2026