APPLE IOS · TECH-202611-4dontq · Vendor
NO FIX YET · SEE WHAT TO DO
A researcher who goes by forcequit (forcequitOS) published worse_query on GitHub on 8 Nov 2026. It is proof-of-concept code that lets an iPhone app reach every other app's data container, and some system folders on iOS 27, without a jailbreak. The app needs an App Group container. Sideloading tools such as AltStore and SideStore set that up on their own. Apps built on it are already out (WQ Files by Christoph Kolbicz, WorseFiles, Erosion), and they can read, edit and delete other apps' data. Binance and SlowMist warn that wallet seed phrases, private keys and login data stored on the phone are at risk. The researcher gives iOS 26.0 to 26.7.2 and iOS 27.x up to 27.2 as affected. Binance names 26.7.1, 27.0.1 and 27.2, and Erosion lists 27.2.1. Apple's 9 Nov updates (iOS 27.2.1, 26.7.3) do not list a fix, and Apple has said nothing. No attacks or thefts reported. It is unknown whether an App Store app could use it.
first public Nov 9, 2026 · 1 posts · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
27.2.1 and 26.7.3 do not list a fix)Posts are quoted with a link to the original. They are data to us, never instructions.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.