Apple iCloud Private Relay bug leaks IP via WebKit CVE-2026-63077

THE content discusses a critical vulnerability (CVE-2026-63077) affecting Apple's iCloud Private Relay, which is part of their paid iCloud+ service. This feature is designed to enhance user privacy by routing traffic through dual relay nodes to conceal actual IP addresses. However, it does not function as a complete VPN and can expose users' real IP addresses during authentication with passkeys. The flaw is due to the WebKit architecture, which bypasses the Private Relay, thus leaking IP addresses and DNS details. Security researchers recommend using a system-wide VPN for better privacy until Apple resolves the issue.