Skip to content
OpenAdvisories

Vendor

SepineTam

2 known vulnerabilities.

Products

stata-mcp 1 mcp-for-stata 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.4
    CVE-2026-55071

    MCP-for-Stata: Stata Command Injection via Unsanitized `package` in `ado_package_install`

    MCP-for-Stata is a MCP server for integrating Stata into agent loops with a safety-first design. Prior to version 1.19.0, the ado_package_install MCP tool in stata-mcp concatenates user-controlled input directly into a Stata command string without any validat…

    SepineTam mcp-for-stata stata-mcp PyPI