CVE-2026-108861: Odoo MCP 1.0.0 through 1.3.2 Information Disclosure via execute_method Tool

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-11 · updated 2026-10-16
Weakness: CWE-200

Description

Odoo MCP 1.0.0 through 1.3.2 contains an information disclosure vulnerability that allows MCP clients to bypass the field-level ACL by invoking the execute_method tool. Attackers or prompt-injected agents can call read or search_read through execute_method naming denied fields to receive their values unredacted.

Affected products

erpipe-org Odoo MCP: from 1.0.0 through 1.3.2

References

https://github.com/erpipe-org/mcp-odoo
https://github.com/erpipe-org/mcp-odoo/blob/v1.3.2/src/odoo_mcp/tools_write.py#L709-L806
https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/erpipe-mcp-odoo-execute-method-field-acl-bypass
https://www.vulncheck.com/advisories/odoo-mcp-1.0.0-through-1.3.2-information-disclosure-via-execute-method-tool
https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/cve-2026-108861-erpipe-mcp-odoo-execute-method-field-acl-bypass

Get alerted when CVE-2026-108861 or the next vulnerability affects your stack