We've identified the issue and are working on a fix.
In the meantime, ask Bolt to run a security audit on the project itself in the chat.