Skip to content
OpenAdvisories

Vendor

craigjbass

8 known vulnerabilities.

Products

clearancekit 8
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.9
    CVE-2026-47134

    ClearanceKit: Policy signing key in System Keychain has permissive ACL allowing any local-root process to forge signed policy

    ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. The ECDSA private key used to sign the on-disk policy database (`/Library/Application Support/clearancekit/store.db`) is stored in the macOS System Keychain. …

    craigjbass clearancekit
  • Medium 6.9
    CVE-2026-47133

    ClearanceKit's signed policy tables lack monotonic counter, allowing replay of older legitimately-signed snapshots

    ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to version 5.0.10, each table in the on-disk SQLite policy store (`/Library/Application Support/clearancekit/store.db`) is verified using an ECDSA signa…

    craigjbass clearancekit
  • Medium 6.8
    CVE-2026-40191

    ClearanceKit has a policy bypass via dual-path Endpoint Security events checking only source path

    ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to 5.0.4-beta-1f46165, ClearanceKit's Endpoint Security event handler only checked the source path of dual-path file operations against File Access Auth…

    craigjbass clearancekit
  • Medium 6.3
    CVE-2026-34218

    ClearanceKit: Managed and user-defined policy rules not enforced between opfilter start and first policy modification

    ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to version 4.2.14, two related startup defects created a window during which only the single compile-time baseline rule was enforced by opfilter. All ma…

    craigjbass clearancekit