GitHub Advisoryadvisory · PyPI

GHSA-vw84-hprm-cxmm Agno session state overwrites between different sessions/users

HIGH Published 2025-10-31 Modified 2025-10-31 Official page ↗
Aliases
CVE-2025-64168
Ecosystem
PyPI
Packages
agno
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
Weaknesses
CWE-362, CWE-668
Reviewed
2025-10-31

Affected packages

• PyPI agno: >= 2.0.0, < 2.2.2 → fixed in 2.2.2

Description

Impact Under certain conditions (under high concurrency), when `session_state` is passed to an Agent or Team during run or arun calls, a race condition can occur, causing a `session_state` to be assigned and persisted to the incorrect session. This may result in user data from one session being exposed to another user. Patches This has been patched in version 2.2.2. Upgrade with `pip install -U agno`.

Related

Alias · CVE (1)

  • CVE-2025-64168 Agno is a multi-agent framework, runtime and control plane. vulnerability

Weakness · CWE (2)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
  • CWE-668 Exposure of Resource to Wrong Sphere weakness

References