Medium severity4.0NVD Advisory· Published Aug 29, 2025· Updated Apr 15, 2026

CVE-2025-54142

Description

Akamai Ghost before 2025-07-21 allows HTTP Request Smuggling via an OPTIONS request that has an entity body, because there can be a subsequent request within the persistent connection between an Akamai proxy server and an origin server, if the origin server violates certain Internet standards.

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

community.akamai.com/customers/s/feed/0D5a700000W51m8CABnvd
www.akamai.com/blog/security-research/advisory-cve-2025-54142-http-request-smuggling-via-options-bodynvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000