CVE-2026-47708: MCP-for-Stata: Command injection via log_file_name parameter in Stata command wrapper

June 4, 2026

The log_file_name parameter in the stata_do API and CLI is directly interpolated into a Stata command string without sanitization. The security guard (GuardValidator) only scans the do-file content but does not validate this parameter. An attacker can inject arbitrary Stata commands (including shell, python, erase, etc.) by crafting a malicious log_file_name containing quotes, newlines, or Stata command separators.

References

github.com/SepineTam/mcp-for-stata/commit/e6f945941ae0c7cf5e74a428e0b3dc82b396382f
github.com/SepineTam/mcp-for-stata/issues/74
github.com/SepineTam/stata-mcp/security/advisories/GHSA-4p62-hqp5-g644
github.com/advisories/GHSA-4p62-hqp5-g644
nvd.nist.gov/vuln/detail/CVE-2026-47708

Code Behaviors & Features

Detect and mitigate CVE-2026-47708 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →