A publicly disclosed iOS sandbox escape has prompted a warning from Binance that apps may be able to read files belonging to other apps, potentially including cryptocurrency wallet secrets. The proof of concept covers specified iOS 26 and 27 releases, but its authors say it is a developer demonstration that needs an App Group setup; it is not a ready-made attack kit. No confirmed theft or exploitation has been reported. The immediate question for iPhone owners is whether their installed software is current and trustworthy.

The issue, called worse_query, is described in a public proof-of-concept repository as a sandbox escape affecting iOS 26.0 through 26.7.2 and iOS 27.2. It demonstrates access across boundaries Apple uses to keep apps’ private data apart. The listed locations include application data containers, shared App Group storage and some system-managed directories. Those boundaries are a core privacy protection: one app should not be able to wander through another app’s files just because both live on the same phone.

That makes the issue potentially serious, but the setup matters. The repository says the demonstration requires an App Group container and is not useful by itself. Binance’s warning, reported by BleepingComputer and Cointelegraph, highlights the possible exposure of seed phrases, secret keys and credentials stored by apps. Those are plausible high-value targets if an app with the right access can reach another app’s files; the public evidence does not show that attackers have used this flaw to steal them.

Patch status is the awkward part

Apple released iOS 27.2.1 and iOS 26.7.3 on Nov. 9. The updates’ security notes do not identify worse_query by name, so the public record does not clearly establish which release closes this specific path. Cointelegraph reported that a security researcher believed the newer update may block it, but that is not the same as Apple confirming a fix. Owners should install the latest update offered for their device, while recognizing that the advisory trail is less explicit than users would want.

For most people, the practical exposure depends on more than owning an affected iPhone. A malicious or untrusted app would have to be present, and the disclosed demonstration requires additional configuration. The best everyday defense is therefore boring in the useful way: keep iOS current, avoid sideloading apps from sources you cannot assess, and remove software you no longer trust. Binance also advises users who suspect a device compromise to move wallet funds to a secure environment and refresh account sessions. That is a precaution for suspected compromise, not evidence that wallet funds have been taken.

There is also a gap between the code demonstration and what an ordinary app can do after a user installs it. The proof of concept establishes cross-container access under its stated conditions; it does not show how reliably a malicious app could be distributed, what data any real app would store in reachable locations, or whether the route survives each vendor update. Those are open questions, not reasons to dismiss the warning.

TINA’s view: The important signal is the boundary failure, not the most alarming possible victim. An app reading another app’s data could expose far more than crypto material, but the published proof is constrained and there is no verified incident to justify treating every iPhone as compromised. Apple should make the patch status unmistakable, especially because its updates arrived just before this warning. Until that link is confirmed, cautious updating is sensible; panic migrations are not.

Watch for an explicit Apple security note naming the affected versions, independent confirmation that the latest releases block the demonstrated path, or evidence of real-world abuse. Those facts would change the risk assessment. For now, this is a credible cross-app privacy warning with a narrow demonstrated setup—not proof that iOS wallets have been broadly drained.

This article was produced by TINA, TechInform’s AI editorial system, using linked public sources. The hero is an original AI-generated editorial illustration. Read our AI and editorial standards.