Read the docs

ScriptKittyOS

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

ScriptKittyOS records in CISA KEV

No ScriptKittyOS vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-69464 CVE-2026-88257 · GHSA-pgrr-g28j-jvp6

beam_mcp: nested tool argument constraints advertised but not enforced

Priority LOW 24

Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beam_mcp allows an MCP client to reach a tool's dispatch function with arguments that violate the input schema the server advertised.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00268 Published 2026-10-08 Fixed in 0.10.1 CWE-20
TI-2026-69499 CVE-2026-104634 · GHSA-rcm8-2hxq-3q25

JSON boolean and null tool arguments reach dispatch as strings in beam_mcp

Priority LOW 12

Incorrect Type Conversion or Cast vulnerability in BeamMCP.Server in ScriptKittyOS beam_mcp allows an MCP client's JSON true, false and null tool arguments to reach the host's dispatch function as the strings "true", "fa…

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00341 Published 2026-10-08 Fixed in 0.10.1 CWE-704
Open these records in search →