A sandbox escape disclosed by researcher forcequitOS could let a running app from an untrusted source read another app’s files if it successfully exploits the weakness, potentially exposing wallet data saved in plaintext.
In its repository, forcequitOS labels the code a proof of concept and lists iOS 26.0–26.7.2 and iOS 27.2. The setup also calls for an App Group container tied to the app running the code.
The weakness, called worse_query, targets how iOS keeps app files apart. Access would depend on the untrusted app running and successfully defeating that separation.
SlowMist said the potential wallet impact depends on what the wallet stores: a seed phrase, keystore or WebView cache could be exposed if kept in plaintext. SlowMist Chief Information Security Officer im23pds said the flaw by itself does not transfer assets.
EconoTimes previously covered SlowMist’s warning about iOS flaws and locally stored wallet data.
