Akamai vulnerabilities
We track 5 vulnerabilities in Akamai products across 4 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on October 14, 2026.
Latest Akamai vulnerabilities
- 8.5 High severity
Guardicore Platform Agent: Improper Control of Resource Identifiers
Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a user to interact with a malicious link, an attacker can use a spoofed JWT token to inject arbitrary parameters into the
- 7.4 High severity
Guardicore Platform Agent: Time-of-check Time-of-use (TOCTOU) Race Condition
Akamai Guardicore Platform Agent (GPA) and Zero Trust Client on Linux and macOS allow TOCTOU-based local privilege escalation. The GPA service creates an IPC socket in the world-writable /tmp directory. It accepts unauthenticated IPC control messages. This ena
- 7.8 High severity
Guardicore Platform Agent: Inclusion of Functionality from Untrusted Control Sphere
The GC-AGENTS-SERVICE running as part of Akamai´s Guardicore Platform Agent for Windows versions prior to v49.20.1, v50.15.0, v51.12.0, v52.2.0 is affected by a local privilege escalation vulnerability. The service will attempt to read an OpenSSL configuration
- 8.0 High severity
Enterprise Application Access: Incorrect Permission Assignment for Critical Resource
An issue was discovered in Akamai Enterprise Application Access (EAA) before 2025-01-17. If an admin knows another tenant's 128-bit connector GUID, they can execute debug commands on that connector.
- 7.1 High severity
Secure Internet Access Enterprise Threatavert: Incorrect Authorization
Akamai SIA (Secure Internet Access Enterprise) ThreatAvert, in SPS (Security and Personalization Services) before the latest 19.2.0 patch and Apps Portal before 19.2.0.3 or 19.2.0.20240814, has incorrect authorization controls for the Admin functionality on th