Researchers say Apple iCloud Private Relay can sometimes leak users’ real IP addresses

Security researchers report that Apple’s iCloud Private Relay, a privacy feature intended to hide users’ real IP addresses from the websites they visit, can in some cases expose the actual IP address. Multiple outlets describe the issue as a problem tied to WebKit, the browser engine used in Apple’s ecosystem. The researchers say that while Private Relay generally routes traffic in a way that should mask the user’s IP, a flaw in how requests are handled can result in websites receiving the real IP address instead. TechCrunch characterizes the finding as a public service announcement warning that Private Relay is not always fully effective. Android Authority similarly notes that a WebKit-related leak can cause the real IP to be disclosed, adding that Apple is already investigating the problem. 9to5Mac frames the same discovery in terms of Private Relay potentially revealing real IP information to websites and reiterates that the underlying concern is that the feature’s intended privacy protections may fail under certain conditions. Across reports, the key point is that the behavior is tied to a specific implementation and research indicates Apple is reviewing the issue.