László Várady

Binance Warns of iOS Sandbox Escape Flaw Exposing Crypto Wallet Secrets Across Multiple Versions

Binance has issued a security advisory highlighting a vulnerability in Apple’s iOS 26.7.1, 27.0.1, and 27.2 that enables malicious third-party apps to read private files from other applications. The flaw, referred to as worse_query, functions as a publicly disclosed sandbox escape technique that bypasses iOS security boundaries without requiring a jailbreak. A proof-of-concept tool named WQ Files has been released that can browse, export, edit, and delete data stored by other apps, directly threatening cryptocurrency seed phrases, private keys, and login credentials. No confirmed crypto losses have been reported yet, but Binance recommends immediate installation of the latest iOS updates, removal of untrusted apps, and wallet migration if compromise is suspected. Apple released patches on November 9 addressing nine issues, including CVE-2026-113963, which was reported by researcher László Várady and involves access via App Intents rather than App Group containers. It remains unclear whether CVE-2026-113963 matches the worse_query issue exactly.