GHSA-3298-56P6-RPW2 OpenClaw has incomplete Fix for CVE-2026-27486: Unvalidated SIGKILL in `!stop` Chat Command via `shell-utils.ts`

Fixed in OpenClaw 2026.3.24, the current shipping release. Advisory Details Title: Incomplete Fix for CVE-2026-27486: Unvalidated SIGKILL in !stop Chat Command via shell-utils.ts Description: Summary The !stop and /bash stop chat command kills background bash processes using SIGKILL directly,...

MAL-2022-5913 Malicious code in salesforcedx-shell-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dd51df1ff0a2bd392dc4ddc31b57f9cdcba880d05fba1c0d0c898f481c68f94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in salesforcedx-shell-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dd51df1ff0a2bd392dc4ddc31b57f9cdcba880d05fba1c0d0c898f481c68f94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...