A vulnerability was identified in stata-mcp prior to v1.13.0 where insufficient validation of user-supplied Stata do-file content can lead to command execution.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.00567·Published 2026-04-08·Fixed in 1.13.0CWE-94