A critical race condition vulnerability in the Agno multi-agent framework (versions 2.0.0 through 2.2.1) risks the unauthorized exposure of user data between concurrent sessions.

This vulnerability is a race condition (CWE-362) occurring under high concurrency when session_state is passed to Agent or Team objects. An authenticated user can trigger this flaw, which results in the improper synchronization of shared resources and the exposure of one user's session data to another user.

The potential for unauthorized cross-session data exposure poses a significant risk to data privacy and regulatory compliance. Given the CVSS score of 7.1, this is classified as a High severity issue, as successful exploitation could lead to the leakage of sensitive user information or internal application state across otherwise isolated sessions.

Immediate Action: Update the Agno package to version 2.2.2 or later to resolve the underlying synchronization issue.

Proactive Monitoring: Monitor application logs for anomalous session behavior or unexpected errors occurring during high-concurrency operations.

Compensating Controls: While no direct WAF rule can prevent this internal race condition, limiting concurrent requests per session or implementing strict rate limiting may reduce the window of opportunity for exploitation until the patch is applied.

Public Exploit Available: Unknown

The vulnerability represents a significant risk to data confidentiality within the Agno framework. Organizations utilizing versions 2.0.0 through 2.2.1 should prioritize upgrading to version 2.2.2 immediately to ensure that session isolation is correctly maintained and to prevent the unintentional leakage of sensitive user data.