Description
When running the AWS Serverless Application Model Command Line Interface (SAM CLI) build process with Docker and symlinks are included in the build files, the container environment allows a user to access privileged files on the host by leveraging the elevated permissions granted to the tool. A user could leverage the elevated permissions to access restricted files via symlinks and copy them to a more permissive location on the container.
Users should upgrade to v1.133.0 or newer and ensure any forked or derivative code is patched to incorporate the new fixes.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AWS | AWS Serverless Application Model Command Line Interface | 1.98.0 – < 1.133.0 | 1.133.0 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 1 repository
-
murataydemir/AWS-SAM-CLI-Vulnerabilities ★ 0 · Apr 2, 2025
Issue with AWS SAM CLI (CVE-2025-3047, CVE-2025-3048)
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | aws-sam-cli | < 1.133.0 | 1.133.0 | GHSA-px37-jpqx-97q9 |