HTTP Request Smuggling Vulnerability in Akamai Ghost

CVE-2025-54142

What is CVE-2025-54142?

The vulnerability in Akamai Ghost allows HTTP Request Smuggling through an OPTIONS request with an entity body. This issue arises due to the potential for a subsequent request to be sent within the persistent connection established between an Akamai proxy server and an origin server. If the origin server does not adhere to certain Internet standards, it creates a loophole that could be exploited by an attacker, compromising web application security.

References