argocd-mcp vulnerabilities
1 known vulnerability in argocd-mcp from Argoproj-labs. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
10.0average CVSS score
Latest first
- 10.0 Critical severity
argocd-mcp: Binding to an Unrestricted IP Address
argocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions without requiring caller credentials when ARGOCD_API_TOKEN is configured. Attackers who can reach the listener can invoke the full tool surface using the operator's s