A critical command injection vulnerability in mcp-for-stata allows for full remote code execution under the privileges of the server process.

The ado_package_install tool fails to sanitize input, allowing an unauthenticated attacker to inject newline characters and execute arbitrary Stata commands, which can be further leveraged to trigger shell escape commands at the operating system level.

Successful exploitation grants an attacker full control over the host environment where the Stata-MCP server resides. Given the CVSS score of 8.4, this vulnerability poses a severe risk of data exfiltration, lateral movement within the network, and complete system compromise. Organizations running this integration in production environments face significant operational and security exposure.

Immediate Action: Update the mcp-for-stata package to version 1.19.0 or later immediately to incorporate the necessary input validation fixes.

Proactive Monitoring: Review system logs for unusual process execution patterns or unexpected shell commands originating from the Stata-MCP server service account.

Compensating Controls: Ensure the Stata-MCP server is running with the principle of least privilege, specifically restricting the service account from accessing sensitive filesystem areas or network segments.

Public Exploit Available: Unknown.

The severity of this vulnerability, combined with the potential for full system compromise, necessitates an immediate update to version 1.19.0. Organizations should prioritize patching this component in all environments to prevent unauthorized code execution and potential data breaches.