CVE-2026-33631 is a high-severity vulnerability (CVSS 8.7) affecting ClearanceKit versions 4.1 and earlier on macOS, allowing local processes to bypass configured file access policies. The flaw occurs because the opfilter Endpoint Security system extension failed to intercept seven critical file operation event types, enabling unauthorized access despite existing controls. This local privilege escalation (AV:L/PR:L) has low attack complexity and can lead to high confidentiality and integrity impacts. There are no known workarounds, active exploits, or public exploit code available, and it is not listed on the CISA KEV catalog, though it has generated some community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 4.2CPE matchmatch criteria | cpe:2.3:a:craigjbass:clearancekit:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.