EUVD-2026-30775
GHSA-x835-6gm8-j3h4
Severity by source
AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Adjacent network required for privileged position; no auth or interaction needed; confidentiality-only impact with no integrity or availability effect.
Primary rating from Vendor (apple).
CVSS VectorVendor: apple
Lifecycle Timeline
4DescriptionCVE.org
An attacker in a privileged network position may be able to leak sensitive information. A path handling issue was addressed with improved validation. This issue is fixed in PCC Release 5E290.3.
AnalysisAI
Sensitive information disclosure in Apple Private Cloud Compute (PCC) Server Software prior to release 5E290.3 allows an unauthenticated attacker in a privileged adjacent-network position to intercept or leak sensitive data via a path handling flaw. The root cause is improper input validation (CWE-20) in path processing logic, addressed in PCC Release 5E290.3. No public exploit exists and SSVC exploitation status is 'none', making this a medium-priority patch rather than an emergency response.
Technical ContextAI
Apple Private Cloud Compute is Apple's privacy-preserving server-side AI inference infrastructure, designed to process sensitive user requests from Apple Intelligence features without exposing data to Apple operators. The affected component is the PCC Server Software (CPE: cpe:2.3:a:apple:private_cloud_compute_server_software:*:*:*:*:*:*:*:*), all versions prior to 5E290.3. The vulnerability is rooted in CWE-20 (Improper Input Validation) within path handling routines - a class of flaw where insufficiently validated path inputs can be manipulated to traverse intended boundaries or expose unintended data. The CVSS vector AV:A confirms exploitation requires adjacency to the target network, consistent with PCC's data-center deployment model where the attacker must be on the same network segment or VLAN as the PCC node.
RemediationAI
Update Apple Private Cloud Compute Server Software to PCC Release 5E290.3 or later, as documented in Apple's release notes at https://security.apple.com/documentation/private-cloud-compute/releasenotes#darwin-init. This is the only confirmed fix; no workarounds are documented by the vendor. As a compensating control pending patch deployment, operators should enforce strict network segmentation to prevent unauthorized systems from achieving adjacent-network access to PCC nodes - specifically isolating PCC server network segments behind dedicated VLANs or firewall rules that whitelist only authorized management and inference traffic. This reduces the attacker pool by eliminating opportunistic adjacency, though it does not eliminate the vulnerability for already-adjacent systems such as co-located servers or compromised network equipment.
Same weakness CWE-20 – Improper Input Validation
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today