worse_query: iOS Sandbox Escape Published Without Vendor Fix

# worse_query: iOS Sandbox Escape Published Without Vendor Fix

https://gcdradar.vercel.app/incidents/worse-query-ios-sandbox-escape-published-without-vendor-fix · AIR-2026-1854 · live

- Lane: Research
- Severity: 1 (Research / proof of concept): Researcher proof-of-concept published without a known vendor fix.
- Fix status: Fix status unknown
- First reported: 2026-11-10 (happened 2026-11-08)
- AI role: No AI role
- Products: iOS

## Summary

An iOS sandbox escape called worse_query was published on GitHub, allowing malicious apps to read other applications files on supported versions. Binance warned that this flaw exposes sensitive wallet keys and login credentials, and no vendor fix has been confirmed yet.

## What to do

Monitor for Apple security updates addressing the sandbox escape.

## Affected and fixed versions

- Affected: iOS 26
- Affected: iOS 27

## Latest updates

- 2026-11-10: Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed (https://thehackernews.com/2026/11/binance-warns-of-ios-sandbox-escape.html)

## Sources

- 2026-11-10 The Hacker News: Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed https://thehackernews.com/2026/11/binance-warns-of-ios-sandbox-escape.html
- 2026-11-10 BleepingComputer: Binance warns of iOS flaw that could leak crypto wallet secrets https://bleepingcomputer.com/news/security/binance-warns-of-ios-flaw-that-could-leak-crypto-wallet-secrets

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.