CVE-2026-35667: OpenClaw < 2026.3.24 - Improper Process Termination via Unpatched killProcessTree in shell-utils.ts
OpenClaw before 2026.3.24 contains an incomplete fix for CVE-2026-27486 where the !stop chat command uses an unpatched killProcessTree function from shell-utils.ts that sends SIGKILL immediately without graceful SIGTERM shutdown. Attackers can trigger process termination via the !stop command, causing data corruption, resource leaks, and skipped security-sensitive cleanup operations.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
OpenClawto a version that resolves this vulnerability.Fixed in 2026.3.24
Event History
Frequently Asked Questions
What is the severity of CVE-2026-35667?
CVE-2026-35667 has been classified with a medium severity level due to the risk of improper process termination.
How do I fix CVE-2026-35667?
To mitigate CVE-2026-35667, update OpenClaw to version 2026.3.24 or later.
What impact does CVE-2026-35667 have on system security?
CVE-2026-35667 can lead to potential system instability and unintended termination of processes.
Is CVE-2026-35667 present in all OpenClaw versions?
CVE-2026-35667 affects OpenClaw versions prior to 2026.3.24.
What is the root cause of CVE-2026-35667?
CVE-2026-35667 is caused by an incomplete fix for a previous vulnerability related to the unpatched killProcessTree function.