PT-2025-35165 · Akamai · Akamaighost

Published 2025-08-29 · Updated 2025-08-29 · CVE-2025-54142

Positive Technologies · (AI Summary)

CVSS v3.1

4.0

4.0

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions:

Akamai Ghost versions prior to 2025-07-21

Description:

The software contains an HTTP Request Smuggling flaw triggered by an OPTIONS request containing an entity body. This allows for the potential injection of subsequent requests within the persistent connection between an Akamai proxy server and the origin server, specifically when the origin server does not adhere to certain Internet standards.

Recommendations:

Update Akamai Ghost to version 2025-07-21 or later.

Fix

HTTP Request/Response Smuggling

Weakness Enumeration

CWE-444

Related Identifiers

CVE-2025-54142

Affected Products

Akamaighost

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-54142 · Security Note
• https://akamai.com/blog/security-research/advisory-cve-2025-54142-http-request-smuggling-via-options-body · Note
• https://twitter.com/Jrenou/status/1961351529237287162 · Twitter Post
• https://community.akamai.com/customers/s/feed/0D5a700000W51m8CAB · Note
• https://twitter.com/CVEnew/status/1961282411955982818 · Twitter Post