The theme editor in Bolt allows remote authenticated users to execute arbitrary code by renaming a crafted file

...