A race condition vulnerability in agno versions 2.0.0 up to but not including 2.2.2 can cause session state data to be assigned to the wrong user session under high concurrency. This may lead to exposure of user data across sessions. The issue is fixed in version 2.2.2.