CVE-2026-34218
Medium
Description
ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to version 4.2.14, two related startup defects created a window during which only the single compile-time baseline rule was enforced by opfilter. All managed (MDM-delivered) and user-defined file-access rules were not applied until the user interacted with policies through the GUI, triggering a policy mutation over XPC. This issue has been patched in version 4.2.14.
SeverityMedium
CVSS5.5
Exploit probability—
ProductCraigjbass Clearancekit
PublishedMar 31, 2026
First seenMar 31, 2026
Weakness typeCWE-269Improper privilege management
How to fix
Update
- craigjbass clearancekit4.2.14 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| craigjbass clearancekit | v < 4.2.14 | 4.2.14 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.