CVE-2025-54142

MEDIUM EPSS 16.0%

Published Aug 29, 202510mo ago · Modified Jun 17, 20262w ago

4.0 CVSS 3.1

Medium

Published Aug 29, 2025 10mo ago

Last Modified Jun 17, 2026 2w ago

Description

Akamai Ghost before 2025-07-21 allows HTTP Request Smuggling via an OPTIONS request that has an entity body, because there can be a subsequent request within the persistent connection between an Akamai proxy server and an origin server, if the origin server violates certain Internet standards.

CVSS Details

Base Score

4.0

Exploitability

2.2

Impact

1.4

Vector string

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N

Attack Vector Network

Attack Complexity High

Privileges Required None

User Interaction None

Scope Changed

Confidentiality None

Integrity Low

Availability None

Threat Intelligence

EPSS Exploit Probability

16.0% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-444

References 2

community.akamai.com https://community.akamai.com/customers/s/feed/0D5a700000W51m8CAB
akamai.com https://www.akamai.com/blog/security-research/advisory-cve-2025-54142-http-request-smuggling-via-options-body

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.