CVE-2026-71291

8.8 Élevée

Publiée le 05/08/2026 à 15:24 · Modifiée le 26/08/2026 à 19:13 · Analyse NVD reportée · Source : 309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c

Description

Bolt CMS renders content field values through Twig's full application-level Environment with no SandboxExtension registered anywhere in the codebase. In src/Entity/Field.php, getTwigValue calls shouldBeRenderedAsTwig, which gates rendering only on the field definition's allow_twig flag and a regex checking for , , or ; when true, the raw field value is compiled and rendered via with no sandboxing.

Traduire en français

Produits concernés

bolt core

Scores CVSS

Version	Score	Source	Vecteur
3.1	8.8 Élevée	309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-1336

Références

https://github.com/bolt/core
https://github.com/bolt/core/blob/6.1/src/Entity/Field.php

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories