Apple Private Cloud Compute Flaw Enables Root File Writes and AI Inference Telemetry Leakage

CVE-2026-20685 is a path traversal vulnerability affecting Apple’s Private Cloud Compute (PCC), potentially allowing attackers to write files as root during node boot and redirect sensitive AI inference telemetry to an external server. Sentry Security researcher Drinor received a $150,000 Apple Security Bounty for discovering and reporting CVE-2026-20685, a flaw that could expose sensitive data and allow unauthorized access. PCC is Apple’s server-side platform for Apple Intelligence requests that are too complex to run entirely on an iPhone, iPad, or Mac. Apple describes the system as an extension of device-level privacy protections into the cloud. Its design relies on stateless request processing, cryptographic attestation of...

Læs hele artiklen hos kilden.