EUVD-2026-46112Severity by source
CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local vector with high privileges required; specific timing window maps to AC:H; scope change captures downstream policy enforcement integrity impact.
Primary rating from Vendor (GitHub_M).
CVSS VectorVendor: GitHub_M
Lifecycle Timeline
3DescriptionCVE.org
ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to version 5.0.10, each table in the on-disk SQLite policy store (/Library/Application Support/clearancekit/store.db) is verified using an ECDSA signature stored in the data_signatures table. The signed payload contains only the canonical row content, with no version counter or freshness binding. An attacker who can write store.db and the matching data_signatures row - feasible during the opfilter-update window when the Endpoint Security filter is offline, or via offline-boot / decrypted-backup scenarios - can substitute a previously-captured legitimately-signed snapshot. opfilter accepts the older snapshot as fully valid on next boot because the existing signatures still verify. Version 5.0.10 patches the issue.
AnalysisAI
ClearanceKit's on-disk SQLite policy store on macOS is vulnerable to a replay attack that allows a high-privileged local attacker to substitute a previously-captured, legitimately-signed policy snapshot, causing the opfilter component to enforce outdated or permissive per-process file-access policies on the next boot. All releases prior to version 5.0.10 are affected, with exploitation gated to specific windows: the opfilter-update period when the Endpoint Security filter is offline, offline-boot scenarios, or decrypted-backup restoration. No public exploit code or CISA KEV listing exists at time of analysis, and EPSS data was not provided in available intelligence.
Technical ContextAI
ClearanceKit is a macOS Endpoint Security framework extension that intercepts file-system access events and enforces per-process access policies defined in an SQLite database at /Library/Application Support/clearancekit/store.db. Table integrity is validated using ECDSA signatures stored in a companion data_signatures table. The root cause class is CWE-294 (Authentication Bypass by Capture-Replay): the signed payload covers only canonical row content, with no version counter, monotonic sequence number, timestamp, or nonce. Consequently, an ECDSA signature over an older policy snapshot remains mathematically valid indefinitely - the cryptographic check proves authenticity of the rows at some point in time, but cannot establish recency. The opfilter component has no mechanism to reject a validly-signed but stale snapshot. The affected CPE string cpe:2.3:a:craigjbass:clearancekit:*:*:*:*:*:*:*:* covers all pre-5.0.10 versions. The 'Information Disclosure' tag in the source intelligence likely reflects a downstream consequence: once permissive policies are restored, previously-blocked processes may read sensitive files - but the direct flaw is policy integrity bypass, not a data leak in ClearanceKit itself.
RemediationAI
The definitive fix is to upgrade ClearanceKit to version 5.0.10, which patches the replay vulnerability by introducing freshness binding into the ECDSA-signed payload, preventing previously-captured snapshots from being accepted as current. The vendor advisory is at https://github.com/craigjbass/clearancekit/security/advisories/GHSA-9hx3-5wp9-2qqg. If immediate upgrade is not feasible, restrict write access to /Library/Application Support/clearancekit/store.db and the data_signatures table to the minimum required system accounts using macOS discretionary access controls and System Integrity Protection where applicable - note this does not protect against root-level attackers or offline scenarios. Deploy independent file-integrity monitoring on store.db (using a tool that does not rely on ClearanceKit itself) to detect unauthorized modifications between policy updates; this provides detection but not prevention. Encrypted FileVault volumes reduce the decrypted-backup attack surface for offline scenarios. Note that no compensating control can fully substitute for the patch in offline-boot or backup scenarios, making the version 5.0.10 upgrade the only complete remediation.
More in Clearancekit
View allClearanceKit 4.1 and earlier for macOS allows local authenticated users to completely bypass configured file access poli
ClearanceKit 5.0.4 and earlier allows local attackers with low-privilege accounts to bypass file-system access controls
Local authenticated attackers can bypass file access policies in ClearanceKit (macOS system extension) versions prior to
Local privilege escalation in ClearanceKit opfilter system extension allows root-level processes on macOS to completely
Policy signing key bypass in ClearanceKit prior to 5.0.10 permits any root process on macOS to forge valid signatures ov
ClearanceKit for macOS prior to version 5.0.4-beta-1f46165 fails to validate destination paths in dual-path file operati
ClearanceKit on macOS fails to enforce managed and user-defined file-access policies during startup, allowing local proc
Same weakness CWE-294 – Authentication Bypass by Capture-replay
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today