CyberSecBulletin

Argoproj-labs vulnerabilities

We track 1 vulnerability in Argoproj-labs products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 29, 2026.

1vulnerabilities
1critical
0high
0exploited
10.0average CVSS score

Latest Argoproj-labs vulnerabilities

  • 10.0 Critical severity

    argocd-mcp: Binding to an Unrestricted IP Address

    CVE-2026-82456Argoproj-labsEPSS 2.37%

    argocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions without requiring caller credentials when ARGOCD_API_TOKEN is configured. Attackers who can reach the listener can invoke the full tool surface using the operator's s