iOS 27.0.1 Jailbreak Achieved on iPhone 18 Pro

In a significant development in the cybersecurity realm, experts from Calif have demonstrated a successful untethered jailbreak on the latest iPhone 18 Pro, running on iOS 27.0.1. This breakthrough was showcased at Hexacon 2026, a prominent security conference held by Synacktiv in Paris on October 16.

Significant Achievement at Hexacon 2026

The demonstration marked one of the earliest public indications that Apple’s newest technology can be completely accessed, merely weeks after its release. During the live presentation, the researchers performed a reboot of the iPhone 18 Pro, showcased the device reaching the lock screen, and successfully executed an untethered jailbreak that did not require connection to external devices.

This untethered jailbreak is particularly noteworthy because it remains intact after a full reboot, a rare and challenging feat on modern Apple devices. The significance of this achievement lies in its ability to maintain access without external assistance.

Technical Insight into the Jailbreak

The research team further demonstrated the jailbreak by connecting to the iPhone over SSH on port 2222, accessing it as root. The confirmation of full root access was evidenced by the uid=0 result from the id command. Additionally, the uname command revealed the device running Darwin Kernel 27.0.0 on XNU 13432.2.10 for the T8160 chip, identified as iPhone19,2.

The sw_vers command further confirmed the device’s operating system as iOS 27.0.1, with build number 24A446, while neofetch listed 67 installed packages, all within an uptime of only two minutes.

Challenges and Implications

Achieving root access on current iPhones typically involves exploiting a series of vulnerabilities, including escaping the app sandbox, gaining kernel control, and bypassing hardware-backed security measures like Pointer Authentication Codes (PAC). Retaining such access post-reboot is especially complex due to Apple’s stringent startup code verifications.

While the researchers have not disclosed the specific vulnerabilities exploited, and no public jailbreak tool has been released, the implications for security are profound. Apple, having launched iOS 27 on September 14, addressed over 120 vulnerabilities, with 20 affecting the kernel, as per its security documentation. This was part of a broader update rectifying 273 security issues across Apple platforms.

Future Outlook and Security Measures

Currently, the risk to users remains minimal as the jailbreak method has not been widely disseminated. However, similar chains of vulnerabilities are often leveraged by spyware developers, underscoring the importance for iPhone users to promptly install forthcoming Apple security updates.

Understanding an attack’s full scope can be challenging, even with EDR alerts. As such, users and organizations alike should remain vigilant and proactive in applying security patches to mitigate potential threats.