Three WebKit mechanisms have been discovered to bypass Apple’s iCloud Private Relay. Private Relay is a VPN-like system for Safari on iOS which is meant to prevent websites from viewing the visitor’s IP address and location. Even if the actual page load goes through Private Relay, the prefetch DNS queries can still leak metadata about your network. That traffic again carries the device’s real IP, not the relay or proxy IP the user expects. What’s affectedAffected are Safari on iOS and macOS when Private Relay is used, because Private Relay is implemented as a WebKit‑level proxy that only applies to Safari traffic.