Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2026-20685

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-20685.

Coverage Span: 2026-07-31
Reports: 1 related reports

Associated Reports & Timeline

Beyond Prompt Injection: Hacking Apple's Private Cloud Compute

Sentry researcher Drinor earned a $150,000 bounty for CVE-2026-20685, a path traversal in darwin-init that allowed root file writes on Apple's Private Cloud Compute and redirection of node telemetry.