Medium severity4.0NVD Advisory· Published Aug 29, 2025· Updated Apr 15, 2026

CVE-2025-54142

Description

Akamai Ghost before 2025-07-21 allows HTTP Request Smuggling via an OPTIONS request that has an entity body, because there can be a subsequent request within the persistent connection between an Akamai proxy server and an origin server, if the origin server violates certain Internet standards.

Affected products

Tryghost/Ghostllm-fuzzy
Range: < 2025-07-21

Patches

Vulnerability mechanics

References

community.akamai.com/customers/s/feed/0D5a700000W51m8CABnvd
www.akamai.com/blog/security-research/advisory-cve-2025-54142-http-request-smuggling-via-options-bodynvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000