PT-2026-34037 · Unknown · Clearancekit

CVE-2026-40599 · Published 2026-04-21 · Updated 2026-04-21

Positive Technologies (AI Summary)

CVSS v4.0

8.4

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions ClearanceKit versions prior to 5.0.5

Description ClearanceKit intercepts file-system access events on macOS to enforce per-process access policies. A flaw exists where the software incorrectly identifies a process as an Apple platform binary if it possesses an empty Team ID and a non-empty Signing ID. This allows malicious software to impersonate an Apple process within the global allowlist to gain access to all protected files.

Recommendations Update to version 5.0.5.

Exploit

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2026-40599

GHSA-W253-42QP-5F2X

Affected Products

Clearancekit

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40599.json · Exploit
• 🔥 https://github.com/craigjbass/clearancekit/security/advisories/GHSA-w253-42qp-5f2x · Exploit
• https://osv.dev/vulnerability/CVE-2026-40599 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-40599 · Security Note
• https://twitter.com/infoflowcloud/status/2046676473101037679 · Twitter Post
• https://twitter.com/CVEnew/status/2046675008034877895 · Twitter Post