Tuesday, September 22, 2026
1 change · saas-19.4
Security fixes and vulnerability patches
The IoT module now verifies the user when handling websocket calls, restoring behavior from before version 19.0. This helps ensure IoT communication is only handled for the appropriate user context, reducing access-control risk.
Original PR description
Restore to pre 19.0 behaviour by checking user. Forward-Port-Of: odoo/enterprise#132399 Forward-Port-Of: odoo/enterprise#132098