Skip to content
OpenAdvisories
Medium · 4.0 CVE-2025-54142 EUVD-2025-26158GHSA-cq5q-38rc-vwrj

Akamai Ghost before 2025-07-21 allows HTTP Request Smuggling via an OPTIONS request that has an entity body, because there can be a subsequ…

Published Aug 29, 2025 · Updated Aug 29, 2025 · Assigned by mitre

Description

Akamai Ghost before 2025-07-21 allows HTTP Request Smuggling via an OPTIONS request that has an entity body, because there can be a subsequent request within the persistent connection between an Akamai proxy server and an origin server, if the origin server violates certain Internet standards.

Affected products

VendorProductAffectedFixed
Akamai AkamaiGhost < 2025-07-21 2025-07-21

References