# Researcher Discloses iOS 26 and 27 Sandbox Flaw With Wallet Risk

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/53569
Published: 2026-11-11T04:32:36.000Z
Updated: 2026-11-11T04:32:36.000Z
Section: Technology

> The “worse_query” flaw could let an app from an unknown source read another app’s container. Wallet information is at risk if sensitive data is stored there in plaintext.

Researcher forcequitOS disclosed an iOS 26 and 27 sandbox flaw that could let an unknown app read another app’s files, exposing wallet secrets if they are stored in plaintext.

The flaw, named “worse_query,” is described as a container sandbox escape that breaks isolation between apps. If a user installs an IPA from an unknown source, the app may be able to access another app’s container. An IPA is an iOS app package.

For a crypto wallet, possible exposure depends on what it stores and how. Sensitive information such as a mnemonic, keystore or WebView cache could be at risk if saved in plaintext. SlowMist Chief Information Security Officer im23pds warned that the flaw does not automatically steal assets.