Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was identified in stata-mcp prior to v1.13.0 where insufficient validation of user-supplied Stata do-file content can lead to command execution.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-08 | 1 | Disclosure1 |
| 2026-04-13 | 2 | Disclosure2 |
CVE-2026-31040 A vulnerability was identified in stata-mcp prior to v1.13.0 where insufficient validation of user-supplied Stata do-file content can lead to command execution. https://www.cve.org/CVERecord?id=CVE-2026-31040
Post summary
Stata‑mcp prior to v1.13.0 contains a command‑execution vulnerability stemming from insufficient validation of user‑supplied Stata do‑file content; no exploitation or patch details are mentioned.
🚨*CVE* CVE-2026-31040 A vulnerability was identified in stata-mcp prior to v1.13.0 where insufficient validation of user-supplied Stata do-file content can lead to command execution. https://www.cve.org/CVERecord?id=CVE-2026-31040 ----- Traducción: CVE-2026-31040 Se identifi… http://infoflow.cloud`
Post summary
CVE‑2026‑31040 affects stata‑mcp prior to v1.13.0, allowing command execution through insufficient validation of user‑supplied Stata do‑file content. No PoC, exploit, patch, or active exploitation details are provided.
CVE-2026-31040 Command Execution via Insufficient Validation in Stata-MCP Before v1.13.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-31040
Post summary
The text announces a new vulnerability (CVE‑2026‑31040) in Stata‑MCP that allows command execution due to insufficient validation before version 1.13.0.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | statamcp | stata-mcp | - | - | - |