agentprime: craigjbass-clearancekitEvery new CVE for craigjbass-clearancekit.https://agentprime.io/CVE-2026-47134: ClearanceKit: Policy signing key in System Keychain has permissive ACL allowing any local-root process to forge signed policyhttps://agentprime.io/advisories/CVE-2026-47134/https://agentprime.io/advisories/CVE-2026-47134/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 21:17:22 GMTCVECVE-2026-47133: ClearanceKit's signed policy tables lack monotonic counter, allowing replay of older legitimately-signed snapshotshttps://agentprime.io/advisories/CVE-2026-47133/https://agentprime.io/advisories/CVE-2026-47133/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 21:12:26 GMTCVECVE-2026-40604: ClearanceKit: opfilter system extension can be suspended or signalled by a root process, disabling file-access policy enforcementhttps://agentprime.io/advisories/CVE-2026-40604/https://agentprime.io/advisories/CVE-2026-40604/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 17:41:53 GMTCVECVE-2026-40599: ClearanceKit: Ad-hoc signed binaries can spoof Apple process identities in the global allowlisthttps://agentprime.io/advisories/CVE-2026-40599/https://agentprime.io/advisories/CVE-2026-40599/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 17:37:05 GMTCVECVE-2026-40191: ClearanceKit has a policy bypass via dual-path Endpoint Security events checking only source pathhttps://agentprime.io/advisories/CVE-2026-40191/https://agentprime.io/advisories/CVE-2026-40191/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Apr 2026 20:19:35 GMTCVECVE-2026-34218: ClearanceKit: Managed and user-defined policy rules not enforced between opfilter start and first policy modificationhttps://agentprime.io/advisories/CVE-2026-34218/https://agentprime.io/advisories/CVE-2026-34218/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 Mar 2026 15:13:03 GMTCVECVE-2026-33632: ClearanceKit: opfilter policy bypass via exchangedata and clone operationshttps://agentprime.io/advisories/CVE-2026-33632/https://agentprime.io/advisories/CVE-2026-33632/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 19:32:49 GMTCVECVE-2026-33631: ClearanceKit: opfilter policy bypass via non-open file operationshttps://agentprime.io/advisories/CVE-2026-33631/https://agentprime.io/advisories/CVE-2026-33631/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 19:30:30 GMTCVE