Skip to content
OpenAdvisories

Vendor

ScriptKittyOS

2 known vulnerabilities.

Products

beam_mcp 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.3
    CVE-2026-104634

    beam_mcp: JSON boolean and null tool arguments reach dispatch as strings

    Incorrect Type Conversion or Cast vulnerability in BeamMCP.Server in ScriptKittyOS beam_mcp allows an MCP client's JSON true, false and null tool arguments to reach the host's dispatch function as the strings "true", "false" and "nil". After BeamMCP.Schema.va…

    ScriptKittyOS beam_mcp beam_mcp Hex