Researcher Says Apple Left worse_query Flaw Unpatched in iOS 27.2.1

Researcher forcequitOS said Nov. 10 that Apple’s iOS 27.2.1 left worse_query unpatched, while SlowMist Chief Information Security Officer im23pds corrected an earlier assurance that the release blocked the flaw.

forcequitOS described worse_query as a sandbox escape that could let an app access files in another app’s container. The researcher also said the flaw remained unpatched in iOS 27.3 beta 1.

Apple’s security advisory lists nine fixes but does not mention worse_query, so it does not confirm that the flaw was patched. Apple’s advisory does not substantiate the earlier claim that iOS 27.2.1 protected against worse_query.