CVE-2026-55071: stata-mcp concatenates a package name into a Stata command, and Stata has a shell escape

NVD·medium signalXBlueskyLinkedInCopy link

Published 2026-09-21 at CVSS 8.4 high. In MCP-for-Stata before 1.19.0, the ado_package_install tool concatenates user-controlled input into a Stata command string with no validation, so an attacker who can invoke the tool or the equivalent Python API embeds newline characters in the package argument and injects arbitrary Stata commands. Because Stata supports a shell escape, that reaches command execution on the host. This is the same pattern as CVE-2026-94031 in nexus-mcp from 09-20: an MCP tool argument reaching an interpreter that has an escape hatch.