Medium severity6.5OSV Advisory· Published Mar 31, 2025· Updated Apr 15, 2026
CVE-2025-3047
CVE-2025-3047
Description
When running the AWS Serverless Application Model Command Line Interface (SAM CLI) build process with Docker and symlinks are included in the build files, the container environment allows a user to access privileged files on the host by leveraging the elevated permissions granted to the tool. A user could leverage the elevated permissions to access restricted files via symlinks and copy them to a more permissive location on the container.
Users should upgrade to v1.133.0 or newer and ensure any forked or derivative code is patched to incorporate the new fixes.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
aws-sam-cliPyPI | < 1.133.0 | 1.133.0 |
Affected products
2- Range: v0.1.0, v0.1.1, v0.10.0, …
Patches
Vulnerability mechanics
References
7- github.com/advisories/GHSA-px37-jpqx-97q9ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2025-3047ghsaADVISORY
- aws.amazon.com/security/security-bulletins/AWS-2025-008ghsaWEB
- github.com/aws/aws-sam-cli/pull/7865ghsaWEB
- github.com/aws/aws-sam-cli/releases/tag/v1.134.0nvdWEB
- github.com/aws/aws-sam-cli/security/advisories/GHSA-px37-jpqx-97q9nvdWEB
- aws.amazon.com/security/security-bulletins/AWS-2025-008/nvd
News mentions
0No linked articles in our index yet.