CVE-2025-64168

Agno is a multi-agent framework, runtime and control plane. From 2.0.0 to before 2.2.2, under high concurrency, when session_state is passed to Agent or Team during run or arun calls, a race condition can occur, causing a session_state to be assigned and persisted to the incorrect session. This may result in user data from one session being exposed to another user. This has been patched in version 2.2.2.

CVSS v3 7.1 HIGH

7.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 4.7

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://github.com/agno-agi/agno/security/advisories/GHSA-vw84-hprm-cxmm

Configurations

No configuration.

History

19 Oct 2026, 13:10

Type	Values Removed	Values Added
Summary		(es) Agno es un framework multiagente, tiempo de ejecución y plano de control. Desde la 2.0.0 hasta antes de la 2.2.2, bajo alta concurrencia, cuando se pasa session_state a un Agente o Equipo durante las llamadas run o arun, puede ocurrir una condición de carrera, causando que un session_state sea asignado y persistido a la sesión incorrecta. Esto puede resultar en que datos de usuario de una sesión sean expuestos a otro usuario. Esto ha sido parcheado en la versión 2.2.2.

Information

Published : 2025-10-31 15:15

Updated : 2026-10-19 13:10

NVD link : CVE-2025-64168

Mitre link : CVE-2025-64168

CVE.ORG link : CVE-2025-64168

JSON object : View

Products Affected

No product.

CWE

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CWE-668

Exposure of Resource to Wrong Sphere

{"id": "CVE-2025-64168", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-64168", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-31T15:39:26.705889Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 4.7, "exploitabilityScore": 1.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "agno-agi", "product": "agno", "versions": [{"status": "affected", "version": ">= 2.0.0, < 2.2.2"}]}]}], "published": "2025-10-31T15:15:43.377", "references": [{"url": "https://github.com/agno-agi/agno/security/advisories/GHSA-vw84-hprm-cxmm", "source": "security-advisories@github.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-362"}, {"lang": "en", "value": "CWE-668"}]}], "descriptions": [{"lang": "en", "value": "Agno is a multi-agent framework, runtime and control plane. From 2.0.0 to before 2.2.2, under high concurrency, when session_state is passed to Agent or Team during run or arun calls, a race condition can occur, causing a session_state to be assigned and persisted to the incorrect session. This may result in user data from one session being exposed to another user. This has been patched in version 2.2.2."}, {"lang": "es", "value": "Agno es un framework multiagente, tiempo de ejecuci\u00f3n y plano de control. Desde la 2.0.0 hasta antes de la 2.2.2, bajo alta concurrencia, cuando se pasa session_state a un Agente o Equipo durante las llamadas run o arun, puede ocurrir una condici\u00f3n de carrera, causando que un session_state sea asignado y persistido a la sesi\u00f3n incorrecta. Esto puede resultar en que datos de usuario de una sesi\u00f3n sean expuestos a otro usuario. Esto ha sido parcheado en la versi\u00f3n 2.2.2."}], "lastModified": "2026-10-19T13:10:00.110", "sourceIdentifier": "security-advisories@github.com"}