# CVE-2026-34444: Lupa has a Sandbox escape and RCE due to incomplete attribute_filter enforcement in getattr / setattr

> Attackers can bypass attribute filters in Lupa to escape the sandbox and execute arbitrary code within the host Python environment.

- **Severity:** High 7.9 (`CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H`)
- **Exploited in the wild:** Not known
- **Login needed:** Not needed
- **Attackable:** Over the internet
- **Victim action needed:** Not needed
- **Fix available:** Yes
- **Published:** 6 Apr 2026
- **Updated:** 15 Jul 2026
- **Also known as:** DEBIAN-CVE-2026-34444, GHSA-69v7-xpr6-6gjm, PYSEC-2026-2613, UBUNTU-CVE-2026-34444, openSUSE-SU-2026:10507-1

## What is CVE-2026-34444?

CVE-2026-34444 is a high-severity code injection vulnerability in scoder lupa, published on 6 Apr 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

### Official description

Lupa integrates the runtimes of Lua or LuaJIT2 into CPython. In 2.6 and earlier, attribute_filter is not consistently applied when attributes are accessed through built-in functions like getattr and setattr. This allows an attacker to bypass the intended restrictions and eventually achieve arbitrary code execution.

Weakness: CWE-914 (Improper Control of Dynamically-Identified Variables), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-284 (Improper Access Control)

## Which versions are affected by CVE-2026-34444?

3 open source packages ship an affected version, including lupa. It affects 1 product.


| Package | Ecosystem | Affected | Fixed in |
| --- | --- | --- | --- |
| `lupa` | PyPI | All versions to 2.6 | None |
| `lupa` | PyPI | All versions to 2.6 | None |
| `lupa` | PyPI | All versions to 2.6 | None |
| `python-lupa` | openSUSE:Tumbleweed | All versions | 2.7-1.1 |

Products: Scoder Lupa.

## How do I fix CVE-2026-34444?

Upgrade to a fixed version.

## Is CVE-2026-34444 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-34444 exists.

Public exploit code:

- CVE-2026-34444(Sandbox escape and RCE due to incomplete attribute_filter enforcement in getattr/setattr) (github_poc): https://github.com/redyank/CVE-2026-34444

## Fix prompt for AI coding agents

```text
Check this codebase for CVE-2026-34444 and fix it if it is affected.

What it is: CVE-2026-34444 is a high-severity code injection vulnerability in scoder lupa, published on 6 Apr 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Exploitation: It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-34444 exists.

Affected packages and fixed versions:
- lupa (PyPI): affected all versions up to 2.6; no fix listed
- lupa (PyPI): affected all versions up to 2.6; no fix listed
- lupa (PyPI): affected all versions up to 2.6; no fix listed

Task:
1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.
2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.
3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.
4. Run the tests and summarise what changed and why.
5. If nothing in the project is affected, say so and change nothing.

Reference: https://insights.sbomify.com/CVE-2026-34444/ (Markdown: https://insights.sbomify.com/CVE-2026-34444/index.md)
```

## Sources

- CVE record: https://www.cve.org/CVERecord?id=CVE-2026-34444
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-34444
- OSV: https://osv.dev/vulnerability/CVE-2026-34444

---
From sbomify Insights: https://insights.sbomify.com/CVE-2026-34444/
Summaries are generated and may contain mistakes; the official description above is the record.