EEF-CVE-2026-88257 beam_mcp: nested tool argument constraints advertised but not enforced

Summary Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beammcp allows an MCP client to reach a tool's dispatch function with arguments that violate the input schema the server advertised. BeamMCP.Schema.validate/2 checked type, required, additionalProperties, enum and...

CVE-2026-88257

The beam_mcp library (versions 0.1.0 before 0.10.1 ) contains an Improper Input Validation vulnerability in BeamMCP.Schema . The validate/2 function only enforces constraints (type, required, enum, and numeric bounds) on top-level arguments. Consequently, nested objects and array items lack enfor...

EUVD-2026-94980

Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beammcp allows an MCP client to reach a tool's dispatch function with arguments that violate the input schema the server advertised. BeamMCP.Schema.validate/2 checked type, required, additionalProperties, enum and numeric...