CVE-2026-34444 Lupa has a Sandbox escape and RCE due to incomplete attribute_filter enforcement in getattr / setattr
Attackers can bypass attribute filters in Lupa to escape the sandbox and execute arbitrary code within the host Python environment.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-34444?
CVE-2026-34444 is a high-severity code injection vulnerability in scoder lupa, published on 6 Apr 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Lupa integrates the runtimes of Lua or LuaJIT2 into CPython. In 2.6 and earlier, attribute_filter is not consistently applied when attributes are accessed through built-in functions like getattr and setattr. This allows an attacker to bypass the intended restrictions and eventually achieve arbitrary code execution.
Which versions are affected by CVE-2026-34444?
3 open source packages ship an affected version, including lupa. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
lupa PyPI | All versions to 2.6 | None |
lupa PyPI | All versions to 2.6 | None |
lupa PyPI | All versions to 2.6 | None |
Linux distribution packages (1)
python-lupa openSUSE:Tumbleweed | All versions | 2.7-1.1 |
Products include Scoder Lupa.
How do I fix CVE-2026-34444?
Upgrade to a fixed version.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2026-34444 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-34444 exists.
Public exploit code: 1 proofs of concept on GitHub.
Sources
Also known as DEBIAN-CVE-2026-34444, GHSA-69v7-xpr6-6gjm, PYSEC-2026-2613, UBUNTU-CVE-2026-34444, openSUSE-SU-2026:10507-1.