CVE-2026-88257Published
beam_mcp: nested tool argument constraints advertised but not enforced
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-88257 · Microsoft / collected KEV context
cve-program · CVE-2026-88257
- https://github.com/ScriptKittyOS/beam_mcp/security/advisories/GHSA-mrg2-4747-fmpw
- https://cna.erlef.org/cves/CVE-2026-88257.html
- https://osv.dev/vulnerability/EEF-CVE-2026-88257
- https://github.com/ScriptKittyOS/beam_mcp/commit/083838eb8e17fe5f6fcaf761bdbe203110288b0b
- https://github.com/ScriptKittyOS/beam_mcp/commit/289dbdbad641943b29a3b8d1eb36506cc8cec10a
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.