Apple's Private Relay tool can leak users' IP addresses — with OnionBrowser also affected

Researchers Talal Haj Bakry and Tommy Mysk found three WebKit flaws leaking real IPs despite iCloud Private Relay DNS prefetching, WebAuthn origin requests, and WebTransport bypass proxy settings, exposing users across all Apple browsers Tor and Psylo browsers issued fixes; Apple has not confirmed a

<![CDATA[ <article> <ul><li><strong>Researchers Talal Haj Bakry and Tommy Mysk found three WebKit flaws leaking real IPs despite iCloud Private Relay</strong></li><li><strong>DNS prefetching, WebAuthn origin requests, and WebTransport bypass proxy settings, exposing users across all Apple browsers</strong></li><li><strong>Tor and Psylo browsers issued fixes; Apple has not confirmed a patch but is reviewing the report</strong></li></ul><p>WebKit, Apple’s engine that powers all web browsers in its ecosystem, contained multiple flaws that helped leak the IP addresses of users who paid to keep them hidden.</p><p>This is according to security researchers Talal Haj Bakry and Tommy Mysk who <a href="https://mysk.blog/2026/08/04/webkit-proxy-icloud-private-relay-ip-leak/" target="_blank">noted</a> they had found “three WebKit features that bypass the proxy configuration and send traffic directly from the device instead,” they wrote.</p><p>“DNS prefetching resolves hostnames through the device’s normal DNS path, which reveals the user’s real DNS servers instead of the proxy’s. Available since iOS 26.0; WebAuthn Related Origin Requests make the operating system’s credential service fetch a validation file directly from the device. This exposes the device’s real IP address. Available since iOS 18.0; WebTransport opens a direct HTTP/3 connection and bypasses the proxy, which also exposes the device’s real IP address. Available since iOS 26.4," the researchers said.</p><h2 id="private-relay">Private Relay</h2><p>While the bugs are in WebKit, the leaks come via Private Relay - a privacy feature available with iCloud+ that hides a user’s IP address and encrypts Safari web traffic. Private Relay does not work like a VPN, and does not mask the traffic flowing through other apps and programs - it just handles browser traffic. </p><p>Since WebKit is mandatory for all browsers running in Apple’s ecosystem, the vulnerability affects all of them. Some, including Tor and Mysk’s very own Psylo browsers, have already issued fixes. </p><p>Apple, on the other hand, has not yet confirmed a fix, or even that it was working on one. It did say, according to<em> </em><a href="https://www.404media.co/apples-private-relay-is-exposing-users-real-ip-addresses/" target="_blank"><em>404 Media</em></a>, that it was looking into the research report. </p><p>The researchers built a dedicated website where users can check if Private Relay is working as intended or still leaking the actual IP address into the wild.</p> </article> ]]>