clearancekit vulnerabilities

3 known vulnerabilities in clearancekit from Craigjbass. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  clearancekit: Incorrect Authorization

  CVE-2026-40599Apr 21, 2026Craigjbass

  ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to 5.0.5, ClearanceKit incorrectly treats a process with an empty Team ID and a non-empty Signing ID as an Apple platform binary. This bug allows a malic

• 7.8 High severity

  clearancekit: Missing Authorization

  CVE-2026-33632Mar 26, 2026Craigjbass

  ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to version 4.2.4, two file operation event types — ES_EVENT_TYPE_AUTH_EXCHANGEDATA and ES_EVENT_TYPE_AUTH_CLONE — were not intercepted by ClearanceKit's

• 8.7 High severity

  clearancekit: Missing Authorization

  CVE-2026-33631Mar 26, 2026Craigjbass

  ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. In versions on the 4.1 branch and earlier, the opfilter Endpoint Security system extension enforced file access policy exclusively by intercepting ES_EVENT_TYP