Apple has quietly addressed a security flaw in its iCloud Private Relay feature, rolling out the fix as part of the iOS 26.6.1 update, according to a report from japan.cnet.com.
The Japanese tech outlet reported on Wednesday, August 26, 2026, that the vulnerability was patched without a public announcement. iCloud Private Relay is designed to mask a user's IP address and browsing activity by routing traffic through two separate servers, but the specific nature of the flaw and its potential impact were not detailed in the report.
The update arrives as part of Apple's ongoing maintenance cycle for its mobile operating system. japan.cnet.com notes that the fix was included in iOS 26.6.1, which suggests Apple treated the issue as significant enough to bundle into a point release rather than waiting for a larger update.
This is not the first time Apple has faced scrutiny over the privacy feature. iCloud Private Relay, introduced as a differentiator for paid iCloud subscribers, has been a target for researchers and critics who have questioned its effectiveness in fully anonymizing user traffic. However, the report does not indicate whether the vulnerability was discovered by external researchers or internally.
The quiet approach to patching is notable, as Apple typically publishes detailed security notes for iOS updates. Users who have not yet installed iOS 26.6.1 are advised to update promptly to ensure their devices are protected.
What to watch next: Apple may release a more detailed security advisory for iOS 26.6.1 in the coming days, which could clarify the scope of the vulnerability and whether other platforms, such as macOS, were also affected.
