# WebKit flaw may expose IP addresses despite iCloud Private Relay

2026-08-06T14:24:55+00:00 | Technology | Indian Opinion Desk

Corroboration: 2 independent outlets

Security researchers say a WebKit flaw may let websites discover users’ real IP addresses even when iCloud Private Relay is enabled. Times Now News reports that passkey-enabled websites can trigger a request from the device’s credential service, bypassing Private Relay’s proxied path. The researchers identified are Tommy Mysk and Talal Haj Bakry. The issue may also affect OnionBrowser, a Tor-based browser that uses Apple’s WebKit, according to Times Now News. It says Apple has been informed and plans a fix for autumn 2026. Gadgets 360 cautions that the available information does not show how widespread the problem is or whether attackers have exploited it. Private Relay’s failure is not universal.

## Coverage

- gadgets360.com <https://www.gadgets360.com/apps/news/apple-icloud-private-relay-webkit-flaws-ip-addresses-leak-report-11872566>
- timesnownews.com <https://www.timesnownews.com/technology-science/hackers-could-exploit-apples-icloud-private-relay-to-unmask-users-ip-address-article-155323545>

Tags: Apple, cybersecurity, iCloud Private Relay, privacy, WebKit
Canonical: https://indianopinion.org/webkit-flaws-may-reveal-ip-addresses-despite-private-relay/
License: Summary and commentary (c) Indian Opinion, reusable with attribution. Facts belong to the linked sources.
Cite: https://indianopinion.org/webkit-flaws-may-reveal-ip-addresses-despite-private-relay/#story-in-brief

Review state: restored archive article, accurate at time of publication, not offered to search indexes.