Cryptocurrency exchange Binance has warned iPhone users about a newly identified security vulnerability in Apple’s iOS operating system that could allow malicious applications to access private data stored by other apps, including cryptocurrency wallet information.
The flaw, reportedly named “worse_query”, affects iOS versions 26.7.1, 27.0.1 and 27.2, according to a security alert published by Binance on Tuesday, November 10.
The vulnerability could expose sensitive information such as wallet recovery phrases, private keys and account login credentials. Binance clarified that the issue lies within Apple’s operating system and does not originate from its own application.
According to cybersecurity news outlet BleepingComputer, the flaw could allow malicious applications to bypass Apple’s security restrictions, which prevent apps from accessing data stored by other applications.
The technique is known as a sandbox escape, in which an application gains access to information outside its permitted environment.
Cybersecurity researchers have also developed a proof-of-concept tool called WQ Files to demonstrate the vulnerability. The tool reportedly allows applications to browse, export, modify and delete files belonging to other apps without requiring an iPhone to be jailbroken.
However, an attacker will first need to convince a user to install a malicious application, potentially through unofficial or untrusted distribution channels.
Apple released security updates on November 9, including iOS 27.2.1 and iOS 26.7.3, to address several security vulnerabilities.
One of the patched issues, identified as CVE-2026-113963, could allow an application to access sensitive user information. However, it remains unclear whether the updates specifically address the “worse_query” vulnerability flagged by Binance.
The exchange has advised users to review their installed applications and remove software they no longer use or trust. It also urged them to avoid downloading applications from unofficial sources outside Apple’s App Store.
