Odoo Mcp
Monthly
Field-level access control bypass in Odoo MCP (erpipe-org/mcp-odoo) versions 1.0.0 through 1.3.2 allows an attacker holding a valid, low-privileged MCP client session to read restricted Odoo field values by invoking the execute_method tool and calling the read or search_read ORM methods directly against named denied fields. Exploitation is confidentiality-only, with no integrity or availability impact, and requires authenticated access - the execute_method tool must be exposed and the caller must know or guess the restricted field names; a prompt-injected LLM agent with tool-calling access is an additional attack path. No public exploit code was identified at time of analysis, and the CVSS 4.0 base score of 5.3 reflects a moderate-priority disclosure rather than an emergency, consistent with EPSS-style low-to-moderate risk and no confirmed active exploitation.
Field-level access control bypass in Odoo MCP (erpipe-org/mcp-odoo) versions 1.0.0 through 1.3.2 allows an attacker holding a valid, low-privileged MCP client session to read restricted Odoo field values by invoking the execute_method tool and calling the read or search_read ORM methods directly against named denied fields. Exploitation is confidentiality-only, with no integrity or availability impact, and requires authenticated access - the execute_method tool must be exposed and the caller must know or guess the restricted field names; a prompt-injected LLM agent with tool-calling access is an additional attack path. No public exploit code was identified at time of analysis, and the CVSS 4.0 base score of 5.3 reflects a moderate-priority disclosure rather than an emergency, consistent with EPSS-style low-to-moderate risk and no confirmed active exploitation.