WebKit Leaks Exposed in iOS and macOS Browsers
Researchers discovered three WebKit features in iOS and macOS browsers that bypass proxy configurations, exposing users' real network information. The issues affect proxy browsers and Apple's iCloud Private Relay. The flaws have been fixed in Psylo 1.3.1, but the broader implications for user privacy remain unclear.
Key points
- Researchers found three WebKit features that bypass proxy configurations in iOS and macOS browsers, including DNS prefetching, WebAuthn Related Origin Requests, and WebTransport.
- These features expose users' real network information, affecting proxy browsers and Apple's iCloud Private Relay.
- The issues have been fixed in Psylo 1.3.1, but the broader implications for user privacy remain unclear.
- The flaws were discovered by researchers who created a proof-of-concept website to detect the leaks.
- The affected WebKit features have been available since iOS 18.0 and iOS 26.0, respectively.
Researchers have discovered a significant vulnerability in WebKit-based browsers on iOS and macOS. The issue lies in three WebKit features that bypass proxy configurations, allowing websites to access users' real network information. This affects not only proxy browsers but also Apple's iCloud Private Relay.
The researchers created a proof-of-concept website to detect the leaks, which revealed the flaws in DNS prefetching, WebAuthn Related Origin Requests, and WebTransport. These features have been available since iOS 18.0 and iOS 26.0, respectively.
The good news is that the issues have been fixed in Psylo 1.3.1. However, the broader implications for user privacy remain unclear. The discovery highlights the importance of regular security audits and updates to ensure the integrity of user data.
As the tech industry continues to evolve, it is essential to prioritize user privacy and security. The WebKit leaks serve as a reminder of the ongoing efforts required to protect users' sensitive information.
Sources
The WireByte editorial team synthesises technology news from multiple primary sources, verifies the facts, and links every source. Articles are produced with AI assistance and reviewed under our editorial policy.