CVE-2026-88257 beam_mcp: nested tool argument constraints advertised but not enforced

Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beammcp allows an MCP client to reach a tool's dispatch function with arguments that violate the input schema the server advertised. BeamMCP.Schema.validate/2 checked type, required, additionalProperties, enum and numeric...

PT-2026-107971

Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beam mcp allows an MCP client to reach a tool's dispatch function with arguments that violate the input schema the server advertised. BeamMCP.Schema.validate/2 checked type, required, additionalProperties, enum and numeric...