Beyond Prompt Injection: Hacking Apple’s Private Cloud Compute (CVE-2026-20685)

A path traversal in darwin-init, the PID 1 process that provisions every Apple Private Cloud Compute node, gave a researcher an arbitrary…