Medium 5.5Published Mar 31, 2026

CVE-2026-34218ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies.

Updated under an hour ago (2026-10-19 07:10 UTC)

Does this affect you?

It affects craigjbass clearancekit. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for craigjbass clearancekit

Exploited in the last 30 days

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to version 4.2.14, two related startup defects created a window during which only the single compile-time baseline rule was enforced by opfilter. All managed (MDM-delivered) and user-defined file-access rules were not applied until the user interacted with policies through the GUI, triggering a policy mutation over XPC. This issue has been patched in version 4.2.14.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness (CWE): CWE-269
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Not given
NVD analysis: Analyzed
Record last updated: Jul 24, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

craigjbass clearancekit craigjbass:clearancekit	before 4.2.14	NVD

References

https://github.com/craigjbass/clearancekit/commit/56d617b778c571e3c29b803636d9807940992daapatch
https://github.com/craigjbass/clearancekit/commit/ddfdacb2633681bbd9c2f41dbd536ea039386628patch
https://github.com/craigjbass/clearancekit/security/advisories/GHSA-fpmv-5wgw-qhhrexploit, vendor-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.