Binance has warned iPhone users about a security vulnerability affecting certain versions of Apple’s iOS that could allow malicious applications to access private files stored by other apps. The exposed information could include cryptocurrency seed phrases, private keys, and login credentials.
According to Binance, the vulnerability affects iOS versions 26.7.1, 27.0.1, and 27.2. The exchange stressed that the issue exists within Apple’s operating system and is not limited to the Binance application.
The company stated that malicious apps could exploit the weakness to access sensitive files across the iOS ecosystem, potentially putting cryptocurrency wallets and other personal information at risk.
Although no cryptocurrency losses have been confirmed so far, Binance is urging users to take immediate precautions and install the latest available security updates.
The exchange also recommends removing unnecessary or untrusted applications and ensuring that both iOS and installed apps are updated. Users who suspect their devices have been compromised should consider transferring their funds to a new wallet generated on a clean device and resetting active login sessions.
Public Exploit Raises Security Concerns
The vulnerability, known as “worse_query,” involves an iOS sandbox escape technique that can allow an application to cross security boundaries and access data belonging to other applications.
Security concerns increased after a proof-of-concept exploit called WQ Files was publicly released. The tool reportedly uses the technique to browse, export, modify, and delete data belonging to other applications without requiring an iPhone jailbreak.
For an attack to work, the tool must first be installed on the target iPhone. However, malicious actors could potentially distribute it through untrusted sources using sideloaded applications rather than Apple’s official App Store.
WQ Files has reportedly been demonstrated on iOS versions 26.7.1, 27.0.1, and 27.2, the same versions identified in Binance’s warning.
Apple Releases Security Updates
On November 9, Apple released security updates for iOS 27.2.1, 26.7.3, and 18.7.12, addressing nine security vulnerabilities.
One of the patched issues, tracked as CVE-2026-113963, could allow an application to access sensitive user information.
However, it remains unclear whether this vulnerability is directly related to the issue highlighted by Binance. The CVE-2026-113963 flaw was reported by security researcher László Várady and involved access through App Intents rather than App Group containers.
BleepingComputer has contacted Apple for clarification and further details about the reported vulnerability. Additional information is expected once the company responds.
For cryptocurrency users, the warning highlights the importance of keeping mobile devices updated, avoiding untrusted applications, and protecting wallet recovery phrases and private keys from unauthorized access.
Source: bleepingcomputer Edited by Bernie
