MediumVulnerability
GHSA-jfv4-h8mc-jcp8: OpenClaw: Process Safety - Unvalidated PID Kill via SIGKILL in Process Cleanup
- Identifier
- GHSA-jfv4-h8mc-jcp8
- Published
- Record updated
- Affected
- openclaw < 2026.2.14
- Fixed in
- 2026.2.14
- released February 14, 2026, 3 days before disclosure
Summary
OpenClaw's CLI process cleanup enumerated processes system-wide and matched command-line patterns, then terminated them without checking ownership. On shared hosts, unrelated processes that matched the pattern could be killed. Affected versions are the openclaw npm package before 2026.2.14, including 2026.2.13.
Mitigation
Fixed in 2026.2.14 (planned next release). Process cleanup now only signals owned processes by filtering to direct child PIDs (ppid == process.pid). Hardening follow-ups: prefer graceful termination for resume cleanup (SIGTERM, then SIGKILL fallback), prefer wide ps output (ps -axww) with a fallback, and tighten command-line token matching to avoid substring matches.
Related items
- MediumCVE-2026-121936: easyVoice server-side request forgery through openaiBaseUrl in /api/v1/ttsSimilar attack · NVD/CVE Database
- MediumCVE-2026-118628: MLflow get-artifacts server-side request forgery information disclosureSimilar attack · NVD/CVE Database
- HighCVE-2026-118625: MLflow Tracking Server privilege escalation via get_endpointsSimilar attack · NVD/CVE Database
- InfoWhen trust becomes the payload: Inside the threats, etc quarterly reportSimilar attack · Elastic Security Labs
- MediumCritical Langflow flaws enable authentication bypass and RCESimilar attack · CSO Online