aws-sam-cli vulnerabilities
CVEs whose affected-version data names the aws-sam-cli package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-115414High· 7.8OS command injection in the Terraform hook in AWS SAM CLI
OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the Terraform configuration or plan file consumed by a build to execute arbitrary commands as the build user on the host runn…
▾ TwilightAWS · aws-sam-cliEPSS 0.88%via CVEORG
CVE-2025-3047Medium· 6.5PoCAWS SAM CLI Path Traversal allows file copy to build container
AWS SAM CLI Path Traversal allows file copy to build container
▾ Twilightaws-sam-cli · aws-sam-cliEPSS 0.78%via OSV
CVE-2025-3048Medium· 6.5AWS SAM CLI Path Traversal allows file copy to local cache
AWS SAM CLI Path Traversal allows file copy to local cache
▾ Sunlitaws-sam-cli · aws-sam-cliEPSS 0.67%via OSV