CVE-2026-104634Published
beam_mcp: JSON boolean and null tool arguments reach dispatch as strings
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-104634 · Microsoft / collected KEV context
cve-program · CVE-2026-104634
- https://github.com/ScriptKittyOS/beam_mcp/security/advisories/GHSA-wv7p-j6qh-3hj4
- https://cna.erlef.org/cves/CVE-2026-104634.html
- https://osv.dev/vulnerability/EEF-CVE-2026-104634
- https://github.com/ScriptKittyOS/beam_mcp/commit/083838eb8e17fe5f6fcaf761bdbe203110288b0b
- https://github.com/ScriptKittyOS/beam_mcp/commit/289dbdbad641943b29a3b8d1eb36506cc8cec10a
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.