An issue was discovered in Joomla! Core before 3.8.8. A long running background process such as remote checks for core or extension updates could create a race condition where a session that was expected to be destroyed would be recreated.