What is CVE-2025-54142?

CVE-2025-54142 is a medium-severity vulnerability in Akamai Akamaighost, classified under Inconsistent Interpretation of HTTP Requests (HTTP Request/Response Smuggling). CVSS score: 4.0/10. Published 2025-08-29.

How severe is CVE-2025-54142?

Medium severity. CVSS v3 base score is 4.0 out of 10.

Vulnerability in Akamai Akamaighost

CVE-2025-54142

Akamai Ghost before 2025-07-21 allows HTTP Request Smuggling via an OPTIONS request that has an entity body, because there can be a subsequent request within the persistent connection between an Akamai proxy server and an origin server, if the origin server violates certain Internet standards.

Vulnerability class: HTTP Request Smuggling

EPSS: 0.002 (16.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.0 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N.

Affected products

Akamai Akamaighost — versions 0

Weakness classification (CWE)

CWE-444 — Inconsistent Interpretation of HTTP Requests (HTTP Request/Response Smuggling)

References

Frequently asked questions

What is CVE-2025-54142?: CVE-2025-54142 is a medium-severity vulnerability in Akamai Akamaighost, classified under Inconsistent Interpretation of HTTP Requests (HTTP Request/Response Smuggling). CVSS score: 4.0/10. Published 2025-08-29.
How severe is CVE-2025-54142?: Medium severity. CVSS v3 base score is 4.0 out of 10.