The Conditional Authentication (Adaptive Authentication) script does not correctly enforce the completion of all required authentication steps when a specific multi-step pattern involving certain authenticators is configured. This allows an attacker to bypass intermediate authentication challenges by exploiting how the script handles callbacks and re-execution of authentication steps.

Successful exploitation allows a malicious actor to gain unauthorized access to a targeted user account. This vulnerability can only be exploited when all of the following conditions are met: the application login flow contains a specific secondary authenticator, the Conditional Authentication script is configured with particular event callbacks and re-executes an authentication step, the targeted user has one of the impacted authenticators enrolled, and the attacker successfully completes any preceding authentication steps.

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

CWE-693

https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4973/

[{"vendor":"WSO2","product":"WSO2 Identity Server","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"5.7.0","versionType":"custom","status":"unknown"},{"version":"5.7.0","lessThan":"5.7.0.130","versionType":"custom","status":"affected"},{"version":"5.8.0","lessThan":"5.8.0.113","versionType":"custom","status":"affected"},{"version":"5.9.0","lessThan":"5.9.0.173","versionType":"custom","status":"affected"},{"version":"5.10.0","lessThan":"5.10.0.385","versionType":"custom","status":"affected"},{"version":"5.11.0","lessThan":"5.11.0.432","versionType":"custom","status":"affected"},{"version":"6.0.0","lessThan":"6.0.0.259","versionType":"custom","status":"affected"},{"version":"6.1.0","lessThan":"6.1.0.260","versionType":"custom","status":"affected"},{"version":"7.0.0","lessThan":"7.0.0.138","versionType":"custom","status":"affected"},{"version":"7.1.0","lessThan":"7.1.0.45","versionType":"custom","status":"affected"},{"version":"7.1.0","lessThan":"7.1.0.49","versionType":"custom","status":"affected"},{"version":"7.2.0","lessThan":"7.2.0.7","versionType":"custom","status":"affected"}]},{"vendor":"WSO2","product":"WSO2 API Manager","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"2.6.0","versionType":"custom","status":"unknown"},{"version":"2.6.0","lessThan":"2.6.0.150","versionType":"custom","status":"affected"},{"version":"3.0.0","lessThan":"3.0.0.180","versionType":"custom","status":"affected"},{"version":"3.1.0","lessThan":"3.1.0.356","versionType":"custom","status":"affected"},{"version":"3.2.0","lessThan":"3.2.0.460","versionType":"custom","status":"affected"},{"version":"3.2.1","lessThan":"3.2.1.79","versionType":"custom","status":"affected"},{"version":"4.0.0","lessThan":"4.0.0.381","versionType":"custom","status":"affected"},{"version":"4.1.0","lessThan":"4.1.0.244","versionType":"custom","status":"affected"},{"version":"4.2.0","lessThan":"4.2.0.184","versionType":"custom","status":"affected"},{"version":"4.3.0","lessThan":"4.3.0.95","versionType":"custom","status":"affected"},{"version":"4.4.0","lessThan":"4.4.0.59","versionType":"custom","status":"affected"},{"version":"4.5.0","lessThan":"4.5.0.44","versionType":"custom","status":"affected"},{"version":"4.6.0","lessThan":"4.6.0.8","versionType":"custom","status":"affected"}]},{"vendor":"WSO2","product":"WSO2 Open Banking AM","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"1.4.0","versionType":"custom","status":"unknown"},{"version":"1.4.0","lessThan":"1.4.0.143","versionType":"custom","status":"affected"},{"version":"1.5.0","lessThan":"1.5.0.144","versionType":"custom","status":"affected"},{"version":"2.0.0","lessThan":"2.0.0.405","versionType":"custom","status":"affected"}]},{"vendor":"WSO2","product":"WSO2 Open Banking IAM","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"2.0.0","versionType":"custom","status":"unknown"},{"version":"2.0.0","lessThan":"2.0.0.425","versionType":"custom","status":"affected"}]},{"vendor":"WSO2","product":"WSO2 Traffic Manager","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"4.5.0","versionType":"custom","status":"unknown"},{"version":"4.5.0","lessThan":"4.5.0.43","versionType":"custom","status":"affected"},{"version":"4.6.0","lessThan":"4.6.0.8","versionType":"custom","status":"affected"}]},{"vendor":"WSO2","product":"WSO2 Universal Gateway","defaultStatus":"unaffected","versions":[{"version":"4.5.0","lessThan":"4.5.0.43","versionType":"custom","status":"affected"},{"version":"4.5.0","lessThan":"4.5.0.44","versionType":"custom","status":"affected"},{"version":"4.6.0","lessThan":"4.6.0.8","versionType":"custom","status":"affected"}]},{"vendor":"WSO2","product":"WSO2 API Control Plane","defaultStatus":"unaffected","versions":[{"version":"4.5.0","lessThan":"4.5.0.45","versionType":"custom","status":"affected"},{"version":"4.6.0","lessThan":"4.6.0.9","versionType":"custom","status":"affected"}]},{"vendor":"WSO2","product":"WSO2 Identity Server as Key Manager","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"5.7.0","versionType":"custom","status":"unknown"},{"version":"5.7.0","lessThan":"5.7.0.129","versionType":"custom","status":"affected"},{"version":"5.9.0","lessThan":"5.9.0.179","versionType":"custom","status":"affected"},{"version":"5.10.0","lessThan":"5.10.0.376","versionType":"custom","status":"affected"}]},{"vendor":"WSO2","product":"WSO2 Open Banking KM","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"1.4.0","versionType":"custom","status":"unknown"},{"version":"1.4.0","lessThan":"1.4.0.137","versionType":"custom","status":"affected"},{"version":"1.5.0","lessThan":"1.5.0.127","versionType":"custom","status":"affected"}]},{"vendor":"WSO2","product":"WSO2 Carbon Identity Application Authentication Framework","defaultStatus":"unknown","packageName":"org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.authentication.framework","versions":[{"version":"5.12.153","lessThan":"5.12.153.66","versionType":"custom","status":"affected"},{"version":"5.12.387","lessThan":"5.12.387.48","versionType":"custom","status":"affected"},{"version":"5.14.97","lessThan":"5.14.97.94","versionType":"custom","status":"affected"},{"version":"5.17.5","lessThan":"5.17.5.337","versionType":"custom","status":"affected"},{"version":"5.17.118","lessThan":"5.17.118.24","versionType":"custom","status":"affected"},{"version":"5.18.187","lessThan":"5.18.187.334","versionType":"custom","status":"affected"},{"version":"5.18.248","lessThan":"5.18.248.34","versionType":"custom","status":"affected"},{"version":"5.23.8","lessThan":"5.23.8.221","versionType":"custom","status":"affected"},{"version":"5.24.8","lessThan":"5.24.8.29","versionType":"custom","status":"affected"},{"version":"5.25.92","lessThan":"5.25.92.177","versionType":"custom","status":"affected"},{"version":"5.25.705","lessThan":"5.25.705.23","versionType":"custom","status":"affected"},{"version":"5.25.713","lessThan":"5.25.713.12","versionType":"custom","status":"affected"},{"version":"5.25.724","lessThan":"5.25.724.8","versionType":"custom","status":"affected"},{"version":"5.25.736","lessThan":"5.25.736.3","versionType":"custom","status":"affected"},{"version":"7.0.78","lessThan":"7.0.78.171","versionType":"custom","status":"affected"},{"version":"7.8.23","lessThan":"7.8.23.95","versionType":"custom","status":"affected"},{"version":"7.8.586","lessThan":"7.8.586.21","versionType":"custom","status":"affected"},{"version":"5.25.738","lessThanOrEqual":"5.25.*","versionType":"custom","status":"unaffected"},{"version":"7.8.646","lessThanOrEqual":"*","versionType":"custom","status":"unaffected"}]}]