{"id":2246,"date":"2026-08-06T14:28:56","date_gmt":"2026-08-06T14:28:56","guid":{"rendered":"https:\/\/thedigitalfortress.us\/?p=2246"},"modified":"2026-08-06T14:28:56","modified_gmt":"2026-08-06T14:28:56","slug":"apple-icloud-private-relay-can-expose-real-ips-through-webkit-proxy-bypasses","status":"publish","type":"post","link":"https:\/\/thedigitalfortress.us\/?p=2246","title":{"rendered":"Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses"},"content":{"rendered":"
\n

\ue804<\/i>Ravie Lakshmanan<\/span>\ue802<\/i>Aug 06, 2026<\/span><\/span>Vulnerability \/ Network Security<\/span><\/p>\n<\/div>\n

\n
<\/a><\/div>\n

Cybersecurity researchers have disclosed<\/a> a security issue with Apple’s iCloud Private Relay tool that can expose a user’s real IP address.<\/p>\n

Introduced with iOS 15, iCloud Private Relay employs a dual-hop architecture<\/a> to ensure users’ privacy by routing their Safari web traffic through two relays so that no single third-party, including Apple, can determine where the request is originating from and what sites are being visited. It’s available as part of the iCloud+ subscription.<\/p>\n

Researchers Talal Haj Bakry and Tommy Mysk, who found the issue, said the problem is rooted in three features in Apple’s WebKit: DNS prefetching, WebAuthn Related Origin Requests, and WebTransport. WebKit is the default web browser engine used by Safari and all third-party browsers on iOS and iPadOS, such as Google Chrome, Microsoft Edge, Mozilla Firefox, Brave, and others.<\/p>\n

The three features \u00abbypass the configured proxy and send traffic directly from the device, which exposes the user’s real network,\u00bb the researchers said. \u00abThe same leaks also affect Apple’s iCloud Private Relay.\u00bb<\/p>\n

\n
\"Cybersecurity\"<\/a><\/div>\n<\/div>\n

The issues also affect macOS, as well as any other WebKit-based browser that relies on WebKit’s proxy configuration APIs. In each of these cases, the device’s actual IP address is leaked –<\/p>\n

<\/p>\n