CVE-2026-47708
CriticalCVSS 9.3Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
In MCP-for-Stata prior to version 1.17.3, the `log_file_name` parameter in the `stata_do` API and CLI is directly interpolated into a Stata command string without sanitization. The `GuardValidator` only scans the do-file content but does not validate this parameter. An attacker can inject arbitrary Stata commands (including `shell`, `python`, `erase`) by crafting a malicious `log_file_name` containing quotes, newlines, or Stata command separators.
Risk Assessment
The organization is at risk of remote code execution within the Stata environment, potentially leading to system compromise, data exfiltration, or data destruction.
Recommendation
Immediately update MCP-for-Stata to version 1.17.3 or later, which contains a fix for this vulnerability.
Original NVD description (English source)
MCP-for-Stata is an MCP server for Stata to integrate Stata into an agent. Prior to version 1.17.3, the `log_file_name` parameter in the `stata_do` API and CLI is directly interpolated into a Stata command string without sanitization. The security guard (`GuardValidator`) only scans the do-file content but does not validate this parameter. An attacker can inject arbitrary Stata commands (including `shell`, `python`, `erase`, etc.) by crafting a malicious `log_file_name` containing quotes, newlines, or Stata command separators. Version 1.17.3 contains a patch for the issue.