CVE-2025-54142: Akamai Akamaighost

Medium severity, CVSS 4.0. EPSS: 0.3% chance of exploitation in the next 30 days.

Akamai Ghost before 2025-07-21 allows HTTP Request Smuggling via an OPTIONS request that has an entity body, because there can be a subsequent request within the persistent connection between an Akamai proxy server and an origin server, if the origin server violates certain Internet standards.

Affected products

• Akamai Akamaighost: before 2025-07-21 (fixed in 2025-07-21)

Published 2025-08-29. Last modified 2026-06-17.