Findings

CVE-2021-44476

A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read local files on the server, inclu…

Published Apr 25, 2023 · updated Jun 16, 2026 · odoo odoo

A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read local files on the server, including sensitive configuration files.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 25, 2023 · Catalog

    Detected

    A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read local files on the server, including sensitive configuration files.

  2. Jun 16, 2026 · Catalog

    Updated

    A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read local files on the server, including sensitive configuration files.

Affected

  • cpe odoo/odooversion unspecified

Sources

  • CVE.orgCVE-2021-44476

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2021-44476

    A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read local files on the server, including sensitive configuration files.

    nvd.nist.gov
  • Odoo SecurityCVE-2021-44476

    Odoo or OpenERP product vulnerability. Vendor discussion stays on the Odoo tracker.

    github.com

References

CVE-2021-44476 · ZeroDay Findings