CVE-2026-31040

CRITICAL9.8

A vulnerability was identified in stata-mcp prior to v1.13.0 where insufficient validation of user-supplied Stata do-file content can lead to command execution

Published Apr 8, 2026

Modified 5 months ago

Details

A vulnerability was identified in stata-mcp prior to v1.13.0 where insufficient validation of user-supplied Stata do-file content can lead to command execution.

References

WEB

https://github.com/SepineTam/stata-mcp/commit/52413ce

WEB

https://github.com/SepineTam/stata-mcp/issues/20

WEB

https://github.com/SepineTam/stata-mcp/pull/21

WEB

https://github.com/SepineTam/stata-mcp/releases/tag/v1.13.0

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-31040

CVSS Analysis