A vulnerability has been found in WSO2 Identity Server up to 5.2.0.34 and classified as problematic. The affected element is an unknown function of the component Access Token Handler. This manipulation causes session expiration.

This vulnerability appears as CVE-2025-12624. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.