Researchers Bypass Apple Intelligence Guardrails Using Prompt Injection
Summary
RSAC researchers report combining Neural Execs prompt injection with Unicode manipulation bypassed Apple Intelligence filters in 76% of 100 tests. RSAC says protections rolled out in iOS 26.4 and macOS 26.4; researchers have seen no malicious exploitation.
Key points
- Researchers combined Neural Execs, which uses crafted inputs to trigger attacker-defined tasks, with Unicode manipulation to bypass Apple Intelligence input and output filters.
- In tests using 100 random prompts, the researchers reported a 76% success rate.
- The researchers say the techniques could manipulate private data or functionality in third-party apps integrated with Apple Intelligence; this is a potential impact, not a reported exploitation.
- RSAC estimates 100,000 to 1 million users have installed apps that may be vulnerable, and at least 200 million Apple Intelligence-capable devices were in consumers’ hands as of December 2025.
- RSAC says Apple was notified in October 2025 and protections were rolled out in iOS 26.4 and macOS 26.4.
- The researchers reported seeing no evidence of malicious exploitation.
Article Details
- Event Type
- Researchers demonstrated a high-success-rate bypass of Apple Intelligence safety filters and internal guardrails using prompt injection and Unicode manipulation.
- Impact
- In testing with 100 random prompts, the researchers reported a 76% success rate. The techniques could cause the local model to produce offensive content or manipulate private data and functionality in third-party apps integrated with Apple Intelligence, including health data and personal media. RSAC estimated that 100,000 to 1 million users had installed apps that may be vulnerable. The researchers reported no evidence of malicious exploitation, and protections were rolled out in iOS 26.4 and macOS 26.4.
Vendors
Products
Apple IntelligenceApple Intelligence is a deeply integrated personal intelligence system for iOS, iPadOS, and macOS that combines generative AI with personal context.iOSApple Intelligence is a deeply integrated personal intelligence system for iOS, iPadOS, and macOS that combines generative AI with personal context.iPadOSApple Intelligence is a deeply integrated personal intelligence system for iOS, iPadOS, and macOS that combines generative AI with personal context.macOSApple Intelligence is a deeply integrated personal intelligence system for iOS, iPadOS, and macOS that combines generative AI with personal context.Private Cloud ComputeFor more complex reasoning, it offloads requests to larger foundation models via Private Cloud Compute (PCC) on Apple’s dedicated cloud infrastructure.