A post by @SlowMist_Team on X.
SlowMist TI Alert: iOS sandbox escape 0day PoC “worse_query” disclosed
@SlowMist_Team on X
Not investment advice. Muhabbit scores how much a story may matter, not which way to trade.
SlowMist flagged the disclosure of a public proof-of-concept for an iOS sandbox escape zero-day dubbed “worse_query,” affecting iOS 26.0 through 26.7.2 and iOS 27.2. The flaw is the successor to the earlier “bad_query” issue and is described as a container sandbox escape rather than a full jailbreak, meaning it breaks out of app isolation without unlocking the device. The alert matters because sandbox escapes can expose data and credentials that apps assume are walled off, a concern for mobile-first crypto wallets and trading apps. SlowMist did not attach a severity score or patch timeline in the post, so the next things to watch are Apple’s fix and whether wallet providers confirm exposure.
Muhabbit's AI wrote this summary of @SlowMist_Team's post in its own words. It can get details wrong, so read the post on X.
Named in this story
iOS, Apple (AAPL), SlowMist, worse_query
A linked name opens that asset's sentiment page.