CVE-2026-35667 OpenClaw进程终止漏洞

// PoC for CVE-2026-35667 // Simulation of the vulnerable !stop command behavior function vulnerableKillProcessTree(pid) { // Vulnerability: Directly sends SIGKILL (kill -9) // instead of SIGTERM (kill -15) for graceful shutdown. console.log(`Executing !stop command on PID: ${pid}`); const { exec } = require('child_process'); // This is the vulnerable code path exec(`kill -9 ${pid}`, (error, stdout, stderr) => { if (error) { console.error(`Error: ${error.message}`); return; } if (stderr) { console.error(`Stderr: ${stderr}`); return; } console.log('Process killed immediately. Potential data corruption occurred.'); }); } // Trigger the vulnerability vulnerableKillProcessTree(1337);