CVE-2026-108861

Published: Oct 11, 2026Modified: Oct 16, 2026Deferred

5.3

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: disclosure@vulncheck.com (Secondary)

Description

Odoo MCP 1.0.0 through 1.3.2 contains an information disclosure vulnerability that allows MCP clients to bypass the field-level ACL by invoking the execute_method tool. Attackers or prompt-injected agents can call read or search_read through execute_method naming denied fields to receive their values unredacted.

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (5)

https://github.com/erpipe-org/mcp-odoo

Source: disclosure@vulncheck.com

https://github.com/erpipe-org/mcp-odoo/blob/v1.3.2/src/odoo_mcp/tools_write.py#L709-L806

Source: disclosure@vulncheck.com

https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/erpipe-mcp-odoo-execute-method-field-acl-bypass

Source: disclosure@vulncheck.com

https://www.vulncheck.com/advisories/odoo-mcp-1.0.0-through-1.3.2-information-disclosure-via-execute-method-tool

Source: disclosure@vulncheck.com

https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/cve-2026-108861-erpipe-mcp-odoo-execute-method-field-acl-bypass

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.