Auth bypass in Craigjbass Clearancekit

CVE-2026-40191

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to 5.0.4-beta-1f46165, ClearanceKit's Endpoint Security event handler only checked the source path of dual-path file operations aga…

Vulnerability class: Broken Access Control

EPSS: 0.001 (1.9th percentile) — read the EPSS interpretation.