CVE-2025-32094
Medium
Description
An issue was discovered in Akamai Ghost, as used for the Akamai CDN platform before 2025-03-26. Under certain circumstances, a client making an HTTP/1.x OPTIONS request with an "Expect: 100-continue" header, and using obsolete line folding, can lead to a discrepancy in how two in-path Akamai servers interpret the request, allowing an attacker to smuggle a second request in the original request body.
SeverityMedium
CVSS4.0
Exploit probability—
Product
AkamaiGhost
AkamaiGhostPublishedAug 7, 2025
First seenAug 7, 2025
Weakness typeCWE-444CWE-444
How to fix
Update
- Akamai AkamaiGhost2025-03-26 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Akamai AkamaiGhost | v < 2025-03-26 | 2025-03-26 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.