CVE-2026-20685: Apple Private Cloud Compute

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

An attacker in a privileged network position may be able to leak sensitive information. A path handling issue was addressed with improved validation. This issue is fixed in PCC Release 5E290.3.

Affected products

• Apple Private Cloud Compute: before 5e290.3 (fixed in 5e290.3)

Published 2026-05-18. Last modified 2026-06-30.