CVE-2025-3047

Summary

CVE-2025-3047 is a vulnerability affecting the AWS Serverless Application Model Command Line Interface (SAM CLI) when building applications with Docker and symlinks. If symlinks are included in the build files, the container environment grants users elevated permissions to access privileged files on the host. Malicious users could exploit this by leveraging these permissions to access restricted files via symlinks and copy them to a more permissive location within the container. Users are advised to upgrade to SAM CLI version 1.133.0 or newer and ensure that any forked or derivative code is patched to incorporate the new fixes.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.