AWS zero day exploited to access codebase for its AI assistant

AWS has now "included additional protections against memory dumps within container builds..."

Updated Jul 30, 2025 9:13 AM / Published Jul 26, 2025 1:59 PM 5 min read

AWS CodeBuild vulnerability CVE-2025-8217 exploited

See also our updated, more detailed story of July 29 .

A hacker accessed two AWS source code repositories by exploiting a zero day in its AWS CodeBuild managed service, AWS confirmed early Saturday.

That vulnerability, now allocated CVE-2025-8217, let an attacker “extract the source code repository (e.g. GitHub, BitBucket, or GitLab) access token through a memory dump within the CodeBuild build environment,” it said.

This content is for members only

Already have an account? Sign in

Add The Stack on Google

Edward Targett

Ed is a co-founder of The Stack. He previously edited Computer Business Review. He has also covered energy markets. He started his journalism career on local papers. He left school at 15 and has made a living asking "but why?" ever since.