CVE-2025-54142
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-08-29

Last updated on: 2025-08-29

Assigner: MITRE

Description
Akamai Ghost before 2025-07-21 allows HTTP Request Smuggling via an OPTIONS request that has an entity body, because there can be a subsequent request within the persistent connection between an Akamai proxy server and an origin server, if the origin server violates certain Internet standards.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-08-29
Last Modified
2025-08-29
Generated
2026-06-16
AI Q&A
2025-08-29
EPSS Evaluated
2026-06-15
NVD
CVE-2025-54142
EUVD
EUVD-2025-26158
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
akamai ghost *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-444 The product acts as an intermediary HTTP agent (such as a proxy or firewall) in the data flow between two entities such as a client and server, but it does not interpret malformed HTTP requests or responses in ways that are consistent with how the messages will be processed by those entities that are at the ultimate destination.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability in Akamai Ghost before 2025-07-21 allows HTTP Request Smuggling via an OPTIONS request that includes an entity body. It occurs because a subsequent request can be sent within the same persistent connection between an Akamai proxy server and an origin server if the origin server does not adhere to certain Internet standards.

Impact Analysis

The vulnerability can lead to HTTP Request Smuggling attacks, which may allow an attacker to interfere with the way a proxy and origin server communicate. This can result in limited integrity impact, such as unauthorized manipulation of requests, but does not affect confidentiality or availability according to the CVSS score.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-54142. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart