Security researchers at Hexacon in Paris unveiled what appears to be a significant vulnerability in Apple's latest flagship device, with a live demonstration of an untethered jailbreak on an iPhone 18 Pro running iOS 27.0.1. The exploit, presented by researcher Calif, proved robust enough to survive a full device reboot—a critical technical milestone that distinguishes it from temporary, tethered exploits that vanish after a restart. This persistence suggests the vulnerability may operate at a level that persists across the boot cycle, whether through a compromised firmware component, bootloader access, or a kernel-level exploit that reinstalls itself.
An untethered jailbreak represents one of the most coveted outcomes in iOS security research, granting unrestricted access to the device without requiring repeated exploitation or connection to a computer. The fact that Calif managed to achieve this on current-generation hardware and software is noteworthy, especially given Apple's multi-year investment in security hardening through features like Secure Enclave, Code Signing Enforcement, and increasingly sophisticated exploit mitigations. The reboot persistence specifically indicates the researcher may have achieved a level of access that goes beyond typical sandbox escapes or userland vulnerabilities, potentially touching lower-level system components that most researchers cannot practically access.
However, critical details remain shrouded in secrecy. Neither the underlying vulnerability nor the exploitation technique has been disclosed publicly, which is standard practice in responsible security research—researchers typically withhold technical details until vendors have adequate time to patch. This leaves the broader security community in an uncertain position: we know a vulnerability exists and can be weaponized, but cannot yet assess its prevalence, whether it affects earlier iOS versions, or how difficult it is to exploit compared to other known attack vectors. Apple has not yet acknowledged the demonstration or issued any statement regarding a potential fix timeline.
The broader implication is that iOS, despite its reputation as a relatively locked-down platform, continues to harbor exploitable gaps that sophisticated attackers can leverage. Whether this particular vulnerability becomes a catalyst for the jailbreaking community or remains an isolated proof-of-concept will depend largely on how quickly it propagates through research channels and whether a public tool materializes before Apple deploys a patch. The coming weeks will prove decisive in determining whether this represents a momentary security lapse or a meaningful shift in the jailbreaking landscape.