CVE-2026-34444

CVE-2026-34444 CVE-2026-34444 Escape de sandbox y RCE debido a una aplicación incompleta de attributefilter en getattr/setattr...

CVE-2026-34444

Lupa integrates the runtimes of Lua or LuaJIT2 into CPython. In 2.6 and earlier, attributefilter is not consistently applied when attributes are accessed through built-in functions like getattr and setattr. This allows an attacker to bypass the intended restrictions and eventually achieve arbitra...