Bolt CMS renders content field values through Twig's full application-level Environment without registering any SandboxExtension. The getTwigValue() method calls shouldBeRenderedAsTwig(), which allows rendering if the field's allow_twig flag is true and the content contains Twig delimiters. The raw field value is then compiled and rendered with no sandboxing, enabling any user with edit access to the affected content type to inject Twig payloads that execute arbitrary OS commands. This results in remote code execution as the web server user. The vulnerability is identified as CWE-1336 and has a CVSS 3.1 score of 8.8 (high severity). No patch or official remediation is currently documented.

An attacker with edit access to the default 'pages' content type can execute arbitrary operating system commands on the server hosting Bolt CMS. This leads to full remote code execution with the privileges of the web server user, compromising confidentiality, integrity, and availability of the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict edit access to trusted users only and consider disabling the allow_twig flag on content fields if possible. Monitor vendor channels for updates and apply official patches once released.