CVE-2025-64168

HIGH

Agno 2.0.0-2.2.1 - Unprotected User Data Exposure via Session State Race Condition

Title source: llm
STIX 2.1

Description

Agno is a multi-agent framework, runtime and control plane. From 2.0.0 to before 2.2.2, under high concurrency, when session_state is passed to Agent or Team during run or arun calls, a race condition can occur, causing a session_state to be assigned and persisted to the incorrect session. This may result in user data from one session being exposed to another user. This has been patched in version 2.2.2.

References (1)

Core 1
Core References

Scores

CVSS v3 7.1
EPSS 0.0013
EPSS Percentile 3.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-362 CWE-668
Status published
Products (2)
agno-agi/agno >= 2.0.0, < 2.2.2
pypi/agno 2.0.0 - 2.2.2PyPI
Published Oct 31, 2025
Tracked Since Feb 18, 2026