The Lupa library's attribute_filter intended to restrict access to sensitive Python attributes is inconsistently enforced when attributes are accessed via getattr and setattr. This allows Lua code with access to Python builtins to bypass the filter, access Python internals, and achieve arbitrary code execution. The vulnerability leads to sandbox escape and full command execution in the host Python process. Applications relying on attribute_filter for security without disabling Python builtins are affected.