CVE-2025-3047 is a medium-severity vulnerability affecting the AWS Serverless Application Model Command Line Interface (SAM CLI) build process when Docker is used with symlinks. This flaw allows an attacker to access privileged host files by leveraging the tool's elevated permissions to copy restricted files via symlinks to a less secure location within the container. The CVSS score is 6.5 (MEDIUM), indicating a network-based attack with low complexity, requiring user interaction, and resulting in high confidentiality impact. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability. Users are advised to upgrade to SAM CLI v1.133.0 or newer to mitigate this risk.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| AWS | AWS Serverless Application Model Command Line Interface | >= 1.98.0, < 1.133.0CNA affecteddefault unaffected |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.