Home / Technology / iCloud Relay Fix: Apple Patches Major IP Leak Vulnerability
iCloud Relay Fix: Apple Patches Major IP Leak Vulnerability
25 Aug
Summary
- iCloud Private Relay vulnerability exposed user IP addresses.
- Apple released an unannounced fix in iOS 26.6.1.
- A lawsuit was filed by Clarkson Law Firm over the flaw.
A critical security vulnerability affecting Apple's iCloud Private Relay has been resolved, according to recent reports. This feature, which is part of the paid iCloud Plus subscription, routes user web traffic through proxy servers to mask their physical location and online activity within the Safari browser and WebKit-based applications.
Developers Talal Haj Bakry and Tommy Mysk identified that user IP addresses could still be leaked, even when iCloud Private Relay was active. They created a webpage to help users check their vulnerability.
Apple has now released an unannounced fix in iOS 26.6.1 and other operating system updates. Following this update, the vulnerability testing page now correctly reports masked IP addresses, indicating the issue has been addressed for Safari users.
This vulnerability prompted a lawsuit from Clarkson Law Firm, known for a previous settlement with Apple. The firm also recently initiated legal action against smart ring maker Oura.
