Bolt CMS vulnerable to authenticated remote code execution

🗓️ 03 Jul 2025 21:31:25Reported by GitHub Advisory DatabaseType

Bolt CMS versions 3.7.0 and earlier allow remote code execution via user profile injection.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2025-34086	29 Jun 202004:59	–	circl
CNNVD	Bolt CMS 安全漏洞	3 Jul 202500:00	–	cnnvd
CVE	CVE-2025-34086	3 Jul 202519:46	–	cve
Cvelist	CVE-2025-34086 Bolt CMS Authenticated Remote Code Execution via Profile Injection and File Rename	3 Jul 202519:46	–	cvelist
EUVD	EUVD-2025-19905	3 Oct 202520:07	–	euvd
NVD	CVE-2025-34086	3 Jul 202520:15	–	nvd
OSV	GHSA-P9QC-8JJX-G8CG Bolt CMS vulnerable to authenticated remote code execution	3 Jul 202521:31	–	osv
Positive Technologies	PT-2025-27826 · Bolt Cms · Bolt Cms	3 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-34086	5 Jul 202520:04	–	redhatcve
Snyk	Arbitrary Code Injection	3 Jul 202521:31	–	snyk

Vulners

Node

bolt bolt_cmsRange≤3.7.0composer

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-34086
boltcms	www.boltcms.io/newsitem/major-announcements-bolt-3-eol-bolt-4-2-5-0-releases
github	www.github.com/bolt/bolt/releases/tag/3.7.1
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/bolt_authenticated_rce.rb
exploit-db	www.exploit-db.com/exploits/48296
rapid7	www.rapid7.com/db/modules/exploit/unix/webapp/bolt_authenticated_rce
github	www.github.com/bolt/bolt/blob/3.7/src/Controller/Backend/Users.php
github	www.github.com/advisories/GHSA-p9qc-8jjx-g8cg

07 Jul 2025 19:10Current

8High risk

Vulners AI Score8

CVSS 3.18.8

CVSS 47.5

EPSS0.67402

SSVC