Skip to content

V1.16.2

Choose a tag to compare

View all tags
@SepineTam SepineTam released this 03 May 19:36
· 99 commits to master since this release
v1.16.2
5c71b1d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Stata-MCP v1.16.2

Release Date: May 4, 2026
Type: Security Fix

What's New

Security hardening for dofile execution with directory boundary validation and guard blacklist bypass protection.

Changes

  • Security: Add directory boundary validation to stata_do so dofiles can only be executed from STATA_MCP_FOLDER.DO or WORKING_DIR (PR #70).
  • Security: Strengthen GuardValidator with three lightweight defenses: dangerous command abbreviations (sh, xsh, winex, unixc, era, rmd), local macro expansion detection, and a startup warning when Guard is disabled (PR #72).
Assets 2
Loading