Agno session state overwrites between different sessions/users
Date: 2025-10
Affected: pip/agno
Attack vector: other
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2025-64168
CWE: CWE-362
CWE-668
CVSS: 7.1 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N)

### Impact Under certain conditions (under high concurrency), when `session_state` is passed to an Agent or Team during run or arun calls, a race condition can occur, causing a `session_state` to be assigned and persisted to the incorrect session. This may result in user data from one session being exposed to another user. ### Patches This has been patched in version 2.2.2. Upgrade with `pip install -U agno`.


Mitigations:

Architectural layers (MAESTRO):