CVE-2026-55071
Received Received - Intake

Command Injection in MCP-for-Stata

Publication date: 2026-09-21

Last updated on: 2026-09-21

Assigner: GitHub, Inc.

Description
MCP-for-Stata is a MCP server for integrating Stata into agent loops with a safety-first design. Prior to version 1.19.0, the ado_package_install MCP tool in stata-mcp concatenates user-controlled input directly into a Stata command string without any validation or sanitization. An attacker who can invoke the MCP tool or the equivalent Python API can embed newline characters in the package argument to inject arbitrary Stata commands. Because Stata supports a shell escape command, this leads to full OS-level arbitrary command execution (RCE) under the account running the Stata-MCP server. The tool is registered in the default all profile, so no non-default configuration is required. This issue has been patched in version 1.19.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-21
Last Modified
2026-09-21
Generated
2026-09-21
AI Q&A
2026-09-21
EPSS Evaluated
N/A
NVD
CVE-2026-55071
EUVD
EUVD-2026-83921

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-55071 is a command injection vulnerability in the stata-mcp package affecting versions 1.18.2 and earlier. The ado_package_install MCP tool concatenates user-controlled input directly into a Stata command string without validation. Attackers can embed newline characters in the package parameter to inject arbitrary Stata commands, including shell commands, leading to full OS-level arbitrary command execution (RCE) under the account running the Stata-MCP server.

Detection Guidance

To detect this vulnerability, check the installed version of mcp-for-stata. If the version is 1.18.2 or earlier, the system is vulnerable. Run: pip show mcp-for-stata or pip list | grep mcp-for-stata to verify the version.

Impact Analysis

This vulnerability allows attackers to execute arbitrary commands on the system running the Stata-MCP server. Potential impacts include credential exfiltration, unauthorized data access, persistence, lateral movement within networks, and complete host compromise. The attack can be performed by any principal who can invoke the MCP tool or Python API, including AI models or remote clients if HTTP transport is exposed.

Compliance Impact

This vulnerability allows full OS-level arbitrary command execution (RCE) under the account running the Stata-MCP server, which could lead to unauthorized access to sensitive data. For GDPR, this may result in data breaches requiring notification under Articles 33-34. For HIPAA, it could expose protected health information (PHI) leading to compliance violations and penalties.

Mitigation Strategies

Upgrade to mcp-for-stata version 1.19.0 or later immediately. This version includes security hardening and validation measures to prevent command injection. Run: pip install --upgrade mcp-for-stata.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-55071. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart