BottleCRM versions up to 1.14.5 contain a server‑side template injection flaw in the Celery task that compiles user‑supplied AccountEmail message_body with django.template.Template(). Authenticated organization members can submit arbitrary template tags through the POST /api/accounts/<id>/create_mail/ endpoint. This allows the attacker to reveal the rendering context and loaded Python modules or to block the shared Celery worker with nested loops, leading to both confidentiality exposure and potential denial of service.

The affected product is MicroPyramid BottleCRM up to and including version 1.14.5. Users running these versions are at risk. No other vendors or product variants are reported to be affected.

The CVSS base score is 5.3, indicating moderate severity. The EPSS score is < 1%, and the vulnerability is not listed in the CISA KEV catalog. The attack requires authentication as an organization member; an attacker can exploit it remotely by issuing a crafted POST request to the create_mail endpoint. Because the flaw exposes internal context and can trigger worker overload, the overall risk is moderate with a potential for data leakage and service interruption.