{"uuid": "41242306-a0aa-4ba7-80c4-a04e4043d309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20685", "type": "seen", "source": "https://t.me/pphm_HackerNews/2557", "content": "\ud83d\udd34 Apple Private Cloud Compute Path Traversal Flaw Lets Attackers Write Files as Root\n\nSecurity researcher Drinor Selmanaj has disclosed a path traversal vulnerability (CVE-2026-20685) in Apple\u2019s Private Cloud Compute (PCC) that allows a privileged network attacker to write attacker-controlled files as root during node boot.\n\nThis flaw affects the Apple Intelligence cloud-inference infrastructure. Apple has addressed the issue in PCC Release 5E290.3 and later, rating it as an information disclosure vulnerability with a CVSS score of 6.5.", "creation_timestamp": "2026-08-22T00:00:10.364288Z"}