CVE-2026-82456 | argoproj-labs argocd-mcp up to 0.8.x HTTP Transport ARGOCD_API_TOKEN improper authentication

August 29, 2026 Yanac

A vulnerability identified as very critical has been detected in argoproj-labs argocd-mcp up to 0.8.x. This impacts an unknown function of the component HTTP Transport. This manipulation of the argument ARGOCD_API_TOKEN causes improper authentication.

This vulnerability is handled as CVE-2026-82456. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More