CVE-2025-64168

{
  "id": "CVE-2025-64168",
  "sourceIdentifier": "[email protected]",
  "published": "2025-10-31T15:15:43.377",
  "lastModified": "2026-10-19T13:10:00.110",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Agno is a multi-agent framework, runtime and control plane. From 2.0.0 to before 2.2.2, under high concurrency, when session_state is passed to Agent or Team during run or arun calls, a race condition can occur, causing a session_state to be assigned and persisted to the incorrect session. This may result in user data from one session being exposed to another user. This has been patched in version 2.2.2."
    },
    {
      "lang": "es",
      "value": "Agno es un framework multiagente, tiempo de ejecución y plano de control. Desde la 2.0.0 hasta antes de la 2.2.2, bajo alta concurrencia, cuando se pasa session_state a un Agente o Equipo durante las llamadas run o arun, puede ocurrir una condición de carrera, causando que un session_state sea asignado y persistido a la sesión incorrecta. Esto puede resultar en que datos de usuario de una sesión sean expuestos a otro usuario. Esto ha sido parcheado en la versión 2.2.2."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "agno-agi",
          "product": "agno",
          "versions": [
            {
              "version": ">= 2.0.0, < 2.2.2",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N",
          "baseScore": 7.1,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "HIGH",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "CHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "LOW",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 4.7
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-10-31T15:39:26.705889Z",
          "id": "CVE-2025-64168",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-362"
        },
        {
          "lang": "en",
          "value": "CWE-668"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/agno-agi/agno/security/advisories/GHSA-vw84-hprm-cxmm",
      "source": "[email protected]"
    }
  ]
}