Researcher Discloses iOS 26 and 27 Sandbox Flaw With Wallet Risk

Researcher forcequitOS disclosed an iOS 26 and 27 sandbox flaw that could let an unknown app read another app’s files, exposing wallet secrets if they are stored in plaintext.

The flaw, named “worse_query,” is described as a container sandbox escape that breaks isolation between apps. If a user installs an IPA from an unknown source, the app may be able to access another app’s container. An IPA is an iOS app package.

For a crypto wallet, possible exposure depends on what it stores and how. Sensitive information such as a mnemonic, keystore or WebView cache could be at risk if saved in plaintext. SlowMist Chief Information Security Officer im23pds warned that the flaw does not automatically steal assets.