PT-2025-35165 · Akamai · Akamaighost

Published 2025-08-29 · Updated 2025-09-12 · CVE-2025-54142

Positive Technologies (AI Summary)

CVSS v3.1

4.0

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Akamai Ghost versions prior to 2025-07-21

Description Akamai Ghost before 2025-07-21 allows HTTP Request Smuggling via an OPTIONS request that has an entity body. This occurs because a subsequent request can be sent within the persistent connection between an Akamai proxy server and an origin server, if the origin server violates certain Internet standards.

Recommendations Update Akamai Ghost to version 2025-07-21 or later.

Fix

HTTP Request/Response Smuggling

Weakness Enumeration

CWE-444

Related Identifiers

CVE-2025-54142

Affected Products

Akamaighost

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2025-54142 · Security Note
• https://twitter.com/epichol/status/1966593676303589563 · Twitter Post
• https://twitter.com/AngeloAkamai/status/1962406832846291453 · Twitter Post
• https://twitter.com/Akamai/status/1964370555898847250 · Twitter Post
• https://t.me/CVEtracker/31192 · Telegram Post
• https://twitter.com/CVEnew/status/1961282411955982818 · Twitter Post
• https://akamai.com/blog/security-research/advisory-cve-2025-54142-http-request-smuggling-via-options-body · Note
• https://twitter.com/RaghuNain/status/1962508540675051931 · Twitter Post
• https://twitter.com/claytonssantos/status/1962820564625825949 · Twitter Post
• https://community.akamai.com/customers/s/feed/0D5a700000W51m8CAB · Note
• https://twitter.com/Jrenou/status/1961351529237287162 · Twitter Post