It's not a vulnerability as such. It does retain data between two executions however that it shouldn't but we're in control of both executions so that doesn't really classify as a vulnerability.

Basically something is stateful that shouldn't be, probably because it's built on Lambda.