erpipe-org

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

erpipe-org records in CISA KEV

No erpipe-org vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-70751 CVE-2026-108861 · GHSA-hmxx-h27g-fgrq

Odoo MCP Information Disclosure via execute_method Tool

MEDIUM 57

Odoo MCP 1.0.0 through 1.3.2 contains an information disclosure vulnerability that allows MCP clients to bypass the field-level ACL by invoking the execute_method tool.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00293 Published 2026-10-11 No fix listed CWE-200

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0