CVE-2026-108861 Odoo MCP 1.0.0 through 1.3.2 Information Disclosure via execute_method Tool
Attackers can bypass field-level access controls to read restricted data via the execute_method tool in Odoo MCP.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-108861?
CVE-2026-108861 is a medium-severity vulnerability in erpipe-org Odoo MCP, published on 11 Oct 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Odoo MCP 1.0.0 through 1.3.2 contains an information disclosure vulnerability that allows MCP clients to bypass the field-level ACL by invoking the execute_method tool. Attackers or prompt-injected agents can call read or search_read through execute_method naming denied fields to receive their values unredacted.
Weakness: CWE-200
Which versions are affected by CVE-2026-108861?
How do I fix CVE-2026-108861?
No fix has been published for CVE-2026-108861 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-108861 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-108861 exists.
Sources
Also known as GHSA-hmxx-h27g-fgrq.