CyberRota Analysis
AI-GeneratedThe ado_package_install MCP tool in MCP-for-Stata versions prior to 1.19.0 is vulnerable to arbitrary command execution due to improper handling of user input, allowing attackers to inject malicious Stata commands. This vulnerability can lead to full OS-level command execution under the account running the Stata-MCP server, posing a significant risk to system integrity. Organizations using affected versions should prioritize upgrading to version 1.19.0 to mitigate this high-severity risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
MCP-for-Stata is a MCP server for integrating Stata into agent loops with a safety-first design. Prior to version 1.19.0, the ado_package_install MCP tool in stata-mcp concatenates user-controlled input directly into a Stata command string without any validation or sanitization. An attacker who can invoke the MCP tool or the equivalent Python API can embed newline characters in the package argument to inject arbitrary Stata commands. Because Stata supports a shell escape command, this leads to full OS-level arbitrary command execution (RCE) under the account running the Stata-MCP server. The tool is registered in the default all profile, so no non-default configuration is required. This issue has been patched in version 1.19.0.