CVE-2026-108585: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in argoproj-labs argocd-mcp

CVE-2026-108585 is a path traversal vulnerability in argocd-mcp through version 0.9.0. The vulnerability arises from insufficient validation of the applicationName parameter in the delete_application tool. By injecting dot-segment path traversal sequences, an attacker or a prompt-injected model can cause the server to send authenticated DELETE requests to unintended API endpoints. The impact is limited by the permissions of the token used, but it can result in deletion of repositories, clusters, or projects accessible to that token.

An attacker with authenticated access and limited privileges can exploit this vulnerability to delete resources such as repositories, clusters, or projects beyond the intended scope of the delete_application tool. The damage is constrained by the token's RBAC permissions, but unauthorized deletion of critical resources could disrupt operations or cause data loss.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the delete_application functionality to trusted users and monitor usage closely. Validate and sanitize input parameters to prevent path traversal. Follow vendor updates for official patches or workarounds.