As reported by SecurityAffairs, a publicly disclosed iOS sandbox escape known as worse_query enables a malicious app to read the local file containers of other apps — breaking one of the most fundamental security boundaries in mobile operating systems. The exploit, published as proof-of-concept code by researcher forcequitOS, affects iOS 26.7.1, 27.0.1, and 27.2. Apple has released updates for these versions, but its release notes do not explicitly list a fix for this issue, creating dangerous ambiguity for defenders.
Why This Matters
The iOS sandbox is the core architectural control that prevents one application from accessing another's data. When that boundary collapses without requiring a jailbreak or kernel exploit, the entire trust model shifts. Any app — including one sideloaded through legitimate distribution tools like AltStore — can potentially exfiltrate secrets stored by any other app on the device.
The most acute risk falls on cryptocurrency wallet apps, password managers, banking applications, and any software that stores authentication tokens or session identifiers in local app containers.
Binance's warning is notable not because the exchange is uniquely vulnerable, but because crypto wallets represent the highest-value target: a single exposed seed phrase enables total and irreversible fund theft. The attack doesn't require sophisticated exploitation — it leverages the App Group container mechanism, a legitimate developer feature, to traverse sandbox boundaries.
Vulnerability Summary
| Detail | Status |
|---|---|
| Vulnerability | iOS sandbox escape via App Group container abuse (worse_query) |
| CVE ID | No CVE assigned or publicly referenced at time of writing |
| CVSS | Not yet scored — estimated High/Critical pending analysis |
| Affected Versions | iOS 26.7.1, 27.0.1, 27.2 |
| Patch Status | Apple released updates but has not confirmed a fix for this specific issue |
| Active Exploitation | None reported as of November 10, 2026 |
| Prerequisites | Attacker must deliver a malicious app to the target device; no jailbreak or kernel exploit required |
The Sideloading Amplification Factor
The availability of tools like WQ Files — a functional file manager built on the worse_query technique — demonstrates how quickly PoC code becomes weaponized. Users who sideload apps through AltStore, SideStore, or alternative app marketplaces face elevated risk because sideloaded apps bypass Apple's App Store review process. With the EU's Digital Markets Act expanding sideloading options across the region, this attack surface will only grow.
Apple's silence on whether the latest updates actually remediate the underlying issue is a significant problem for enterprise defenders and security teams. Without confirmation, organizations cannot reliably inform employees that their devices are protected, nor can they close out risk assessments tied to this exposure.
Shield53 Recommendations
Immediate Actions
For Enterprise Security Teams
- Push MDM policies that restrict or disable sideloading on managed iOS devices until Apple formally confirms remediation.
- Monitor for the presence of AltStore, SideStore, or known worse_query-derived applications on enrolled devices.
- Communicate a temporary advisory to employees who use iOS devices for work-related authentication or financial activity, especially in jurisdictions where sideloading is common.
- Track Apple's security release notes for an explicit CVE assignment and patch confirmation before closing internal incident tickets.
This is not a situation where waiting for clarity is a safe strategy. The combination of public PoC code, functional weaponized tooling, ambiguous vendor communication, and high-value target data creates a window of exposure that defenders should close proactively rather than reactively.
