The vulnerability resides in the execute_method tool of Odoo MCP 1.0.0 through 1.3.2. By invoking this tool, clients can call read or search_read operations on fields that are normally denied by the model's access control lists, resulting in the disclosure of sensitive data that should be protected. The failure to enforce field-level ACLs allows an attacker to read confidential information such as identifiers, personal data, or configuration values, compromising confidentiality.

The affected system is the Odoo MCP module provided by erpipe-org, versions 1.0.0 up to and including 1.3.2. No other vendor products are listed as impacted by this CVE.

The CVSS score of 5.3 indicates a medium level of severity. No EPSS score is available and the vulnerability is not listed in the CISA KEV catalog. Attackers, including those who can inject prompts into MCP clients, can exploit the flaw by sending an execute_method request that references denied fields, thereby reading those values. The attack is likely executed over the network where MCP clients communicate with the Odoo server, meaning remote users with access to the MCP interface can obtain the data.