Openclaw CVE-2026-35667

CVSS 6.1 reflects a local, low-complexity attack requiring low privilege (PR:L) and no user interaction (UI:N) with low confidentiality impact but high availability impact (A:H). EPSS exploitation probability is not provided in available data. The vulnerability is NOT confirmed as actively exploited per CISA KEV status. However, this is a real priority despite the moderate CVSS: the authenticated attack vector (PR:L) is readily available to any user with chat access, the attack is trivial to execute (AC:L), and the consequences are severe-data corruption and loss of cleanup operations can compromise system integrity and security posture. This is not a false-positive high-CVSS issue; the combination of ease of exploitation, authenticated availability, and integrity/availability impact warrants prioritized patching. The incomplete fix status (this is a re-patch of CVE-2026-27486) signals that operational teams must verify the new patch fully resolves the root cause.

An authenticated user with access to OpenClaw's chat interface executes the !stop command targeting a running process. The unpatched killProcessTree function immediately sends SIGKILL to the process tree without allowing graceful SIGTERM shutdown, preventing the application from flushing in-memory buffers, closing database transactions, or running security-sensitive cleanup code. If the targeted process is managing active transactions or holding locks, immediate termination corrupts data state and leaks resources. No public exploit code has been identified, but the attack requires only knowledge of the !stop command syntax and valid chat access-a low barrier for authenticated adversaries.