CVE-2025-64168: Agno session state overwrites between different sessions/users
Impact Under certain conditions (under high concurrency), when sessionstate is passed to an Agent or Team during run or arun calls, a race condition can occur, causing a sessionstate to be assigned and persisted to the incorrect session. This may result in user data from one session being exposed to another user. Patches This has been patched in version 2.2.2. Upgrade with pip install -U agno.
Published Oct 31, 2025 · Updated Nov 5, 2025
Affected packages
agno
- Ecosystem
- PyPI
- Affected
- >= 2.0.0, < 2.2.2
- Fixed in
- 2.2.2
- Check
pip show agno
Advisory details
From the GitHub Advisory Database (CC BY 4.0).
Impact
Under certain conditions (under high concurrency), when session_state is passed to an Agent or Team during run or arun calls, a race condition can occur, causing a session_state to be assigned and persisted to the incorrect session. This may result in user data from one session being exposed to another user.
Patches
This has been patched in version 2.2.2. Upgrade with pip install -U agno.
Credited to JasonLovesDoggo, dirkbrnd.
References
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology