{"uuid": "3c3511d7-d1aa-4726-a981-f3eac044003b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20685", "type": "seen", "source": "https://t.me/pphm_HackerNews/2557", "content": "\ud83d\udd34 Apple Private Cloud Compute Path Traversal Flaw Lets Attackers Write Files as Root\n\nSecurity researcher Drinor Selmanaj has disclosed a path traversal vulnerability (CVE-2026-20685) in Apple\u2019s Private Cloud Compute (PCC) that allows a privileged network attacker to write attacker-controlled files as root during node boot.\n\nThis flaw affects the Apple Intelligence cloud-inference infrastructure. Apple has addressed the issue in PCC Release 5E290.3 and later, rating it as an information disclosure vulnerability with a CVSS score of 6.5.", "creation_timestamp": "2026-08-21T23:00:06.665266Z"}