Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2026-34218

ClearanceKit: Managed and user-defined policy rules not enforced between opfilter start and first policy modification

Description

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to version 4.2.14, two related startup defects created a window during which only the single compile-time baseline rule was enforced by opfilter. All managed (MDM-delivered) and user-defined file-access rules were not applied until the user interacted with policies through the GUI, triggering a policy mutation over XPC. This issue has been patched in version 4.2.14.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

craigjbass clearancekit

  • < 4.2.14affected

References