argocd-mcp 0.8.0 scores a perfect 10.0: it binds to every interface and skips auth entirely when a token is configured (CVE-2026-82456)

NVD·high signalXBlueskyLinkedInCopy link

NVD published CVE-2026-82456 on 2026-08-29 at 14:16 UTC with a CVSS base score of 10.0 CRITICAL, and GitHub issued GHSA-p2x5-x87w-v2xj an hour later. argocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions without caller credentials whenever ARGOCD_API_TOKEN is set, so anyone who can reach the listener drives the full tool surface with the operator's stored [redacted] applications, request syncs, modify Argo CD resources. This is the failure mode where the MCP server treats "I hold a token" as "my callers are authorized."