CVE-2026-108861: Odoo MCP 1.0.0 through 1.3.2 Information Disclosure via execute_method Tool
Odoo MCP 1.0.0 through 1.3.2 contains an information disclosure vulnerability that allows MCP clients to bypass the field-level ACL by invoking the executemethod tool. Attackers or prompt-injected agents can call read or searchread through executemethod naming denied fields to receive their values unredacted.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An MCP client with low-privileged access can exploit it by invoking the execute_method tool. Prompt-injected agents are also identified as a possible attack path if they can cause calls to that tool.
What does an attacker need to do to retrieve restricted data?
The attacker can call read or search_read through execute_method and explicitly name fields that are denied by field-level ACLs. The affected behavior returns the values of those fields without redaction.
What information is exposed?
The vulnerability exposes values from fields that field-level ACLs are intended to deny to the caller. The provided data does not identify particular models or field names.