CVE-2025-3048

Summary

CVE-2025-3048 is a vulnerability affecting the AWS Serverless Application Model Command Line Interface (SAM CLI). When building applications with symlinks, SAM CLI copies the content of these symlinks to the local workspace as regular files or directories. This issue grants unauthorized access to users who don't have access to the symlinks outside of the Docker container. Users are advised to upgrade to version 1.134.0 and apply the necessary patches to forked or derivative code. After upgrading, re-building applications using 'sam build --use-container' is required to update the symlinks and mitigate the vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.