Calif reportedly demonstrated an untethered iOS 27.0.1 jailbreak on an iPhone 18 Pro

The reported jailbreak returned after a reboot, and Heise reported AI assistance in finding the exploit chain.

October 17, 2026

Calif reportedly demonstrated an untethered iOS 27.0.1 jailbreak on an iPhone 18 Pro

Key points

01
Calif reportedly demonstrated the jailbreak at Hexacon in Paris on October 16, 2026, using an iPhone 18 Pro running iOS 27.0.1.
02
The jailbreak reportedly returned after a reboot without a computer connection.
03
Cybersecurity News described SSH access on port 2222 and an `id` result of `uid=0`.
04
Heise reported that AI helped Calif find the exploit chain.
05
Cybersecurity News said on October 16 that no public jailbreak tool had been released.

Calif reportedly demonstrated an untethered jailbreak on an iPhone 18 Pro running iOS 27.0.1; reports say it returned after reboot without a computer.

On October 16, 2026, Calif reportedly demonstrated an untethered jailbreak on an iPhone 18 Pro running iOS 27.0.1 at Hexacon in Paris, according to Cybersecurity News and Heise.

What the demonstration reportedly showed

An untethered jailbreak returns after a device restarts without needing a computer connection. Cybersecurity News reported that this happened during the demonstration. It also described SSH access on port 2222, where the id command returned uid=0, the root account identifier.

AI assistance and a separate iOS 27 route

Heise reported that AI helped Calif find the exploit chain.

Separately, ONE Jailbreak reported that Apple patched a server-side Cryptex/TSS bug associated with a semi-jailbreak on iOS 27.2 beta 3. That account describes a different route and software version from Calif’s iOS 27.0.1 demonstration.