216.73.216.133

CVE-2026-40604

· Published 21/04/2026 18:16 · Modified 22/04/2026 21:24

Labels: CVE-2026-40604 2026-04-21CVE-2026-40604CWE-693[email protected]

Essential information

Published
21/04/2026 18:16
Modified
22/04/2026 21:24
Author
Creator
CVSS
8.2 HIGH (v3) 8.2 HIGH (v4.0)
CISA KEV
No
CWE
CVSS vector

CVSS metrics

Description

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to 5.0.6, the opfilter Endpoint Security system extension (bundle ID uk.craigbass.clearancekit.opfilter) can be suspended with SIGSTOP or kill -STOP, or killed with SIGKILL/SIGTERM, by any process running as root. While the extension is suspended, all AUTH Endpoint Security events time out and default to allow, silently disabling ClearanceKit's file-access policy enforcement for the duration of the suspension. This vulnerability is fixed in 5.0.6.

NVD status

Status
Awaiting Analysis — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
craigbass / clearancekit cpe:2.3:a:craigbass:clearancekit:5.0.6:*:*:*:*:*:*:*

References