Apple’s iCloud Private Relay Bug Leaks Users’ Real IP Addresses

A bug in Apple’s iCloud Private Relay feature, designed to mask users’ IP addresses from visited websites, can inadvertently leak real IP addresses. The flaw affects the implementation of the privacy tool, which is available to iCloud+ subscribers on iOS and macOS devices. No specific technical details, CVE identifiers, or patch release dates were provided in the report. The issue undermines the intended anonymity protections of Private Relay when browsing via Safari. The vulnerability was disclosed in a security notice published on August 5, 2026.