CVE-2026-88257

Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beam_mcp allows an MCP client to reach a tool's dispatch function with arguments that violate the input schema the server advertised. BeamMCP.Schema.validate/2 checked type, required, additionalProperties, enum and numeric bounds on the top-level arguments object only. Constraints inside nested objects and on array items (items, minItems, maxItems, minLength, maxLength, pattern, nested required, enum and additionalProperties: false) were advertised by tools/list and never checked at tools/call or prompts/get, and keywords outside the enforced subset (oneOf, anyOf, $ref) were advertised and ignored. A host whose dispatch code relies on the schema it declared receives values the schema forbids, such as an out-of-range number or an undeclared key inside a nested object. What the host does with such a value decides the impact. This issue affects beam_mcp: from 0.1.0 before 0.10.1.

• CWE-20

• https://cna.erlef.org/cves/CVE-2026-88257.html
• https://github.com/ScriptKittyOS/beam_mcp/commit/083838eb8e17fe5f6fcaf761bdbe203110288b0b
• https://github.com/ScriptKittyOS/beam_mcp/commit/289dbdbad641943b29a3b8d1eb36506cc8cec10a
• https://github.com/ScriptKittyOS/beam_mcp/security/advisories/GHSA-mrg2-4747-fmpw
• https://osv.dev/vulnerability/EEF-CVE-2026-88257

Published

Oct 8, 2026

Last Modified

Oct 8, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-88226Out-of-bounds read in Windows Storage Port Driver allows an …4.6
• CVE-2026-8823Mattermost versions 11.7.x <= 11.7.0, 10.11.x <= 10.11.17 fa…3.8
• CVE-2026-8824A memory corruption vulnerability exists in the vtkBMPReader…7.5
• CVE-2026-8825The Elementor Website Builder WordPress plugin before 4.1.4…4.9
• CVE-2026-88252A flaw was found in sssd. A local user can cause a Denial of…5.5
• CVE-2026-88255Improper Validation of Unsafe Equivalence in Input in ZenHiv…6.3
• CVE-2026-88259CareCam CM2507 IP cameras do not require authentication for …7.5
• CVE-2026-88260Authentication bypass using an alternate path or channel and…8.7
• CVE-2026-88261Improper input validation vulnerability in bizwell xClick al…5.1
• CVE-2026-88262Insufficient session expiration vulnerability in bizwell xCl…8.7
• CVE-2026-88263XikeStor Layer3 switches miss authentication for downloading…8.7
• CVE-2026-88264A flaw was found in crun. When the container configuration d…5.6