{"id":"CVE-2026-108861","published":"2026-10-11T14:17:06.077","lastModified":"2026-10-16T19:18:44.867","description":"Odoo MCP 1.0.0 through 1.3.2 contains an information disclosure vulnerability that allows MCP clients to bypass the field-level ACL by invoking the execute_method tool. Attackers or prompt-injected agents can call read or search_read through execute_method naming denied fields to receive their values unredacted.","cvssScore":4.3,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cwes":["CWE-200"],"vendors":[],"products":[],"references":[{"url":"https://github.com/erpipe-org/mcp-odoo","tags":[]},{"url":"https://github.com/erpipe-org/mcp-odoo/blob/v1.3.2/src/odoo_mcp/tools_write.py#L709-L806","tags":[]},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/erpipe-mcp-odoo-execute-method-field-acl-bypass","tags":[]},{"url":"https://www.vulncheck.com/advisories/odoo-mcp-1.0.0-through-1.3.2-information-disclosure-via-execute-method-tool","tags":[]},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/cve-2026-108861-erpipe-mcp-odoo-execute-method-field-acl-bypass","tags":[]}],"exploitRefs":[{"url":"https://github.com/erpipe-org/mcp-odoo","tags":[]},{"url":"https://github.com/erpipe-org/mcp-odoo/blob/v1.3.2/src/odoo_mcp/tools_write.py#L709-L806","tags":[]}],"hasPoc":true,"ai":null}