Vulnerability in Craigjbass Clearancekit

CVE-2026-40604

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to 5.0.6, the opfilter Endpoint Security system extension (bundle ID uk.craigbass.clearancekit.opfilter) can be suspended with SIGST…

EPSS: 0.000 (6.5th percentile) — read the EPSS interpretation.

Affected products

Craigjbass Clearancekit — versions < 5.0.6

Weakness classification (CWE)

CWE-693 — Protection Mechanism Failure

References

https://github.com/craigjbass/clearancekit/security/advisories/GHSA-5r9w-9fg6-266q (x_refsource_CONFIRM)