p PatchFirst

CVE-2025-64168

CVE-2025-64168 · Agno session state overwrites between different sessions/users

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Agno is a multi-agent framework, runtime and control plane. From 2.0.0 to before 2.2.2, under high concurrency, when session_state is passed to Agent or Team during run or arun calls, a race condition can occur, causing a session_state to be assigned and persisted to the incorrect session. This may result in user data from one session being exposed to another user. This has been patched in version 2.2.2.

CVSS 7.1 · High · EPSS 0.2% · Fix available

Published
Updated

Stack: python

Affected products and versions

  • agno

    Versions
    • >= 2.0.0, < 2.2.2: Affected

    No fix published

  • agno PyPI

    Versions
    • 2.0.0
    • 2.0.1
    • 2.0.10
    • 2.0.11
    • 2.0.2
    • 2.0.3
    • 2.0.4
    • 2.0.5
    • 2.0.6
    • 2.0.7
    • 2.0.8
    • 2.0.9
    • 2.1.0
    • 2.1.1
    • 2.1.10
    • 2.1.2
    • 2.1.3
    • 2.1.4
    • 2.1.5
    • 2.1.6
    • 2.1.7
    • 2.1.8
    • 2.1.9
    • 2.2.0
    • 2.2.1
    Affected ranges
    • ECOSYSTEM: ≥ 2.0.0, < 2.2.2

    Update to 2.2.2

Original sources

Check your server →