iPhone 18 Pro jailbreak: Calif's untethered demo at Hexacon
Key takeaways
- No vulnerabilities or tool are public yet, so there is nothing to patch against today
- Calif also teased Signal and iMessage demos, so IT teams should watch for advisories and review mobile fleet policy
- The demo is unverified by Apple, which has not commented
Calif says it has a jailbreak that survives a reboot on a current iPhone. At Hexacon in Paris on 16 October 2026, the security firm demonstrated an untethered jailbreak on an iPhone 18 Pro running iOS 27.0.1, with root access returning after a restart.
Apple has not commented on the demo, and no vulnerabilities or tools have been released. Calif's newsletter post says everything "will be released in due time." For now, the evidence is a stage demonstration and a video.
The headline numbers
The figures here are thin, which is itself informative.
| Item | Detail |
|---|---|
| Device | iPhone 18 Pro |
| Software | iOS 27.0.1 |
| Venue and date | Hexacon, Paris, 16 October 2026 (event runs 16 and 17 October) |
| Jailbreak type | Untethered, survives reboot |
| Access shown | SSH session as root after a reboot and normal passcode unlock |
| Uptime shown in terminal | About two minutes |
| Demos announced by Calif | Four, including a Signal one-click and an iMessage demo |
| Public bug details or tool | None |
Video posted by jailbreak researcher Billy Ellis shows the team rebooting the phone, unlocking it with the regular passcode and opening a root SSH session. The terminal reported iOS 27.0.1, and the short uptime is consistent with a device that had genuinely just restarted.
What the data actually shows
The reboot is the story. A tethered or semi-tethered jailbreak needs a computer or a manual step to come back after a restart. An untethered one does not.
Reaching root on a modern iPhone typically takes a chain of bugs: one to escape the app sandbox, one to take over the kernel, and a way past hardware-backed defences such as Pointer Authentication Codes, which detect tampering with memory pointers.
The four-part structure of Calif's post matters too. It opens with a Signal one-click demo, then asks "But who cares about a third-party app when everyone uses iMessage, right?" and moves to iMessage, then the jailbreak, then a closing line, "APT stands for Apple Persistent Threat." Whether those demos are linked to the jailbreak chain is not stated.
There is also an AI thread. Apple's iOS 27 security notes credit Calif.io, working with Claude and Anthropic Research, for two unrelated crash bugs, and Calif's Thai Duong wrote in April that Claude helped him take apart an iOS Safari exploit. That is context, not proof that AI produced the jailbreak.
What the data does not tell us
Quite a lot. Calif has not named the vulnerabilities, so it is unknown whether the chain depends on a single flaw or several, whether Apple already knows about them, or whether iOS 27.0.2 or a later release would block them. Apple has not responded, so there is no confirmation that the company can reproduce the result.
The demo also proves one device in a controlled setting. It does not show reliability across handsets, whether the exploit needs physical access or user interaction, or how long persistence lasts beyond a reboot. Nothing in the source says the jailbreak is being used against anyone in the wild, and the one-click and iMessage demos are described only by title.
Decrypt's claim that this is the first untethered, permanent jailbreak on such devices is its own framing, not something Calif states.
How this compares
Jailbreaking has a long history of delivering features first. Decrypt recalls that early jailbroken phones filmed video before Apple shipped it, ran Android, unlocked carriers and installed themes. Today the practical uses are narrower: installing apps outside the App Store, browsing the full file system and deleting bloatware. Few people jailbreak now, but Decrypt's point stands: every working jailbreak on current hardware shows that defences Apple invests heavily in can still be beaten.
The more relevant comparison for enterprises is not hobbyist tweaking but what root access means to an attacker: the same capabilities that let a user inspect the file system let malware do so silently. Apple's recent release cycle is also busy.
So what?
For IT teams in the UK and US, there is nothing to patch against today, because nothing is public. The sensible response is preparation. Confirm which staff devices run iOS 27.0.1, check that mobile device management can enforce a fast update to the next point release, and make sure compliance checks can flag jailbroken devices.
Consumers face little immediate risk from a stage demo, but the iPhone 18 Pro is Apple's current flagship, and the question of when Apple patches matters. Buyers weighing a handset should read iPhone 18 Pro thermals are actually impressive. Everything else is iterative. for the hardware picture; the security picture is now less settled.
Key takeaways
- Calif demonstrated an untethered jailbreak, with root surviving a reboot, on an iPhone 18 Pro running iOS 27.0.1.
- No vulnerabilities or tools are public, and Apple has not commented.
- Calif's post also lists Signal and iMessage demos, which it says will be released in due time.
- IT teams should prepare update and detection workflows now.
Watch for Calif's promised release and Apple's response. Until then, the single most important action is to make sure managed iPhones can be updated quickly the moment a fix appears.
