File System Access Vulnerability in ClearanceKit for macOS
CVE-2026-40599

8.4HIGH

Key Information:

Vendor

Craigjbass

Status
Clearancekit
Vendor
CVE Published:
21 April 2026

What is CVE-2026-40599?

ClearanceKit, a tool used for intercepting file-system access on macOS, has a vulnerability involving erroneous handling of process identification. Prior to version 5.0.5, it allowed processes with an empty Team ID but a non-empty Signing ID to be recognized as Apple binaries. This flaw enables malicious actors to masquerade as trusted Apple processes in the system's global allowlist, granting unauthorized access to all secured files. The vulnerability is addressed in version 5.0.5, highlighting the importance of keeping software updated to ensure robust security.

Affected Version(s)

clearancekit < 5.0.5

References

https://github.com/craigjbass/clearancekit/security/advis...
x_refsource_CONFIRM

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.