CVE-2026-31040

A vulnerability was identified in stata-mcp prior to v1.13.0 where insufficient validation of user-supplied Stata do-file content can lead to command execution...

Command Injection

Overview stata-mcp is a Let LLM help you achieve your regression analysis with Stata Affected versions of this package are vulnerable to Command Injection via the statado tool’s handling of Stata do-files. The server executes user-provided or LLM-generated do-files with subprocess.Popen...,...