Authentication Logic Bypass in WSO2 Identity Server

CVE-2025-9973

What is CVE-2025-9973?

The WSO2 Identity Server is exposed to a vulnerability that arises from the improper validation of organization context during adaptive authentication flows. This flaw enables a malicious actor with configuration privileges to exploit adaptive authentication features intended for their own organization, potentially executing unauthorized authentication actions across other organizations and sub-organizations. As a result, this vulnerability poses significant risks including privilege escalation, unauthorized resource access, and possible account takeovers, especially in multi-organization environments where adaptive authentication is active.

References