Clearancekit CVE-2026-34218

The CVSS 6.3 score reflects a local attack vector (AV:L) with low complexity (AC:L) and no privileges or user interaction required (PR:N, UI:N). The 4.0 vector indicates high scope impact on system integrity (SI:H) and confidentiality (SC:H), but no direct availability impact. The attack is trivial to execute from any local process during the startup window-a persistent threat window rather than a one-shot exploit. However, real-world risk is constrained by temporal factors: the vulnerability only manifests during system boot or service restart, and exploitation requires the attacker to act before the user opens the ClearanceKit GUI. No KEV status is provided, suggesting no confirmed active exploitation in the wild at time of analysis. No public exploit code (POC) is referenced. The high-integrity, system-level nature of the bypass combined with ease of exploitation (local, unauthenticated) elevates this above typical local-only CVEs; systems that depend on ClearanceKit for security policy enforcement face a meaningful integrity risk until patched, though the window is narrow and the prerequisite is local code execution already on the system.

A local attacker with code execution on a macOS system (e.g., via a compromised application or user-level privilege escalation) can exploit the startup window to read, write, or delete files that should be blocked by ClearanceKit's user-defined or MDM-managed policies. For example, an attacker could copy sensitive files from a restricted directory or modify system files during the narrow window after boot but before the user opens the ClearanceKit GUI. The attacker requires only local code execution and no special privileges; the vulnerability is deterministic and does not depend on timing beyond the startup phase, making it a reliable vector for systems reliant on ClearanceKit for file integrity assurance.