A flaw that lets one app reach inside every other app on a device is still open, and a cryptocurrency exchange is doing the public warning. Binance told customers this week that the weakness spans several iOS releases and touches wallets, seed phrases and stored credentials rather than its own software alone.
Researchers going by forcequit and 0xjohnny published a working tool, named worse_query, over the weekend of November 8. The title deliberately echoes bad_query, an earlier artifact from the same pair.
The permission that opened the door
The reachable vault depends on a hostile app already on the device, so installed software matters more than any setting.
Once a build claims that entitlement, the tool reads data its account should never reach, plus some system paths on iOS 27. No memory corruption, no firmware trick. Just a boundary that stops enforcing itself.
Why the timing irritated researchers
The pair filed with Apple on October 10, were told a review normally finishes inside a week, then saw the calendar stretch.
Both said forfeiting a bounty payment did not bother them if owners learned sooner. Apple’s notes for the November 9 releases, which brought iOS 27.2.1, 26.7.3 and 18.7.12, describe nothing like this flaw, and the pair say the iOS 27.3 beta does not close it either.
Source: AppleInsider
