odoo-valuation-repair

Warn

Audited by Gen Agent Trust Hub on Jul 28, 2026

Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The provided Python script for Odoo Server Actions uses .sudo() to bypass standard access control lists (ACLs) and record rules for sensitive models, including account.move (journal entries), account.account (chart of accounts), and stock.valuation.layer (financial inventory records).
  • [COMMAND_EXECUTION]: The script utilizes raw SQL execution (env.cr.execute) to perform UPDATE operations on the product_product and stock_lot tables. This directly modifies database state by bypassing the Odoo ORM (Object-Relational Mapping), which can lead to data integrity issues or unauthorized modification of records if the execution context is compromised.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 28, 2026, 07:45 PM
Security Audit — agent-trust-hub — odoo-valuation-repair