Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses

Cybersecurity researchers have found a security issue with Apple's iCloud Private Relay that can reveal a user's actual IP address. iCloud Private Relay is a feature that routes Safari web traffic through two relays to protect user privacy, ensuring no single entity can identify the request's origin. This feature was introduced in iOS 15 and is designed to maintain user anonymity by using a dual-hop architecture. The issue arises from WebKit proxy bypasses, which can compromise the privacy protections offered by iCloud Private Relay. As a result, users' real IP addresses can be exposed despite the privacy measures in place. The vulnerability undermines the privacy benefits of using iCloud Private Relay with Safari.