Skip to content
OpenAdvisories

Vendor

erpipe-org

1 known vulnerabilities.

Products

Odoo MCP 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-108861

    Odoo MCP 1.0.0 through 1.3.2 Information Disclosure via execute_method Tool

    Odoo MCP 1.0.0 through 1.3.2 contains an information disclosure vulnerability that allows MCP clients to bypass the field-level ACL by invoking the execute_method tool. Attackers or prompt-injected agents can call read or search_read through execute_method na…

    erpipe-org Odoo MCP