CVE-2026-40604

CVE-2026-40604 affects ClearanceKit, a macOS security extension that enforces file-system access policies on a per-process basis. Prior to version 5.0.6, the opfilter Endpoint Security system extension (uk.craigbass.clearancekit.opfilter) can be suspended or terminated by any root-level process, causing all authorization events to default to allow status and effectively disabling the application's file-access controls. The vulnerability requires root-level privileges to exploit, making the attack complexity moderately elevated. However, the impact is significant: successful exploitation completely circumvents ClearanceKit's security policy enforcement through suspension of critical system processes. The CVSS score is unavailable, though the FAUCET Risk Score of 40.0/100 indicates moderate concern. There is currently no evidence of active exploitation in the wild. The vulnerability is not listed on the Known Exploited Vulnerabilities catalog, and community attention remains low as reflected in the inactive Hot List status. The extremely low EPSS score of 0.00017 suggests this vulnerability is not a priority target compared to other disclosed vulnerabilities.