Cryptocurrency exchange Binance has alerted iPhone users to a newly identified iOS weakness that could let rogue applications reach private information held by other apps. The company warned that the problem could put cryptocurrency wallet details at risk.
The vulnerability, reportedly called “worse_query”, affects iOS 26.7.1, 27.0.1 and 27.2. Binance published its alert on Tuesday, November 10.
How the iOS flaw could expose wallet data
According to the alert, unauthorised applications could read private files belonging to other apps. Those files may include wallet recovery phrases, private keys and account login credentials. Binance said the issue lies within Apple’s iOS operating system and is not specific to its own cryptocurrency app.
BleepingComputer, a cybersecurity news outlet, reported that the flaw could allow malicious apps to get around Apple’s built-in protections, which are meant to stop apps from viewing each other’s private data. Such an attack is known as a sandbox escape. If it succeeded, sensitive information stored locally on an iPhone could be exposed.
Cybersecurity researchers have also released a proof-of-concept tool called WQ Files to show the possible impact. The tool reportedly lets users browse, export, change and erase files belonging to other applications, without jailbreaking the phone. An attacker would first need to convince a user to install a malicious app, possibly from an unofficial or untrusted source.
Apple’s recent updates and unresolved questions
Apple released security updates on November 9, including iOS 27.2.1 and iOS 26.7.3, to fix several security issues. One of the patched bugs, tracked as CVE-2026-113963, could let an application access sensitive user information.
It has not yet been confirmed whether these updates address the worse_query flaw that Binance highlighted. Until more information emerges, iPhone users are advised to install the latest security updates and keep their apps current.
Steps Binance recommends for iPhone users
Binance has urged users to review their installed apps and delete any they no longer need or do not trust. It also advised against downloading apps from unofficial sources, particularly those distributed outside Apple’s App Store. Users worried about their wallets may consider the following steps:
- Moving digital assets to a newly generated wallet on a clean, trusted device.
- Resetting active login sessions to help block unauthorised access to compromised accounts.
