A working sandbox escape for unpatched iPhones is now public, letting one app read the private storage of every other app on the same phone. No jailbreak, no kernel exploit. The proof of concept landed on GitHub on November 8 as worse_query.
A boundary that stopped holding
iOS normally gives each app its own walled container. The technique steps around that wall once an app declares a group container, a permission sideloading tools grant almost automatically at sign-in with an Apple ID. From there it reaches app data, extension storage, daemon directories and shared group space, plus some system paths on iOS 27.
Why a crypto exchange spoke up
The warning came from Binance rather than Apple. The exchange told users on November 10 that wallet seed phrases, private keys and login credentials sit exposed on any device running a malicious app, stressing the fault is iOS-wide. It named iOS 26.7.1, 27.0.1 and 27.2 as tested targets.
An early release and an unanswered report
Researcher forcequit built worse_query with 0xjohnny as the successor to an earlier trick called bad_query. The pair published early, with forcequit saying Apple had been slow to reply while others were passing the bug around. Developer Christoph Kolbicz separately shipped WQ Files, a manager that browses and clears other apps’ data using worse_query as its engine.
The patch notes say nothing
Apple’s November 9 iOS updates addressed iMessage, Bluetooth and AirPlay instead. Neither the 27.2.1 advisory nor the 26.7.3 notes mention a sandbox issue, and Apple will not discuss reports it has not fixed. No theft has been reported. Anyone suspecting a hostile app should assume any seed phrase it could read is gone, move funds to a wallet made on a clean device and end every active session.
Source: Security Affairs, CyberInsider
