Product
argocd-mcp
An MCP server implementation for ArgoCD, used to expose ArgoCD's GitOps deployment capabilities for invocation by AI agents.
Timeline (last 90 days)
Oct 13
Disclosed MCP vulnerabilities include: argocd-mcp shipped with no authentication at all, Rill's OAuth flow allowed attackers to skip the user consent step, and prompt injection existed in the tool descriptions of multiple MCP servers.
Unverified50%