I've seen this sometimes when one of the rules in rule chain is not able to initialize. Check rule nodes lifecycle messages.

I have a /logout rest endpoint that invalidates a session by using HttpSession#invalidate (). Sometimes (10 out of 1000 requests) the following IllegalStateException is thrown.