forcequitos/worse_queryProof-of-concept iOS 26.0–26.7.2 and 27.2 sandbox escape that grants an app access to App Group and application container paths via an App Group container.
This is a proof-of-concept for developers and isn't useful by itself.
worse_query is the direct successor to bad_query and essentially replaces it. To use worse_query, you'll have to set up an App Group container for your app.
worse_query can access these paths:
/var/containers/Data/System (iOS 27)
/var/containers/Shared/SystemGroup/* (iOS 27)
/var/mobile/Containers/Data/Application/*
/var/mobile/Containers/Data/InternalDaemon/*
/var/mobile/Containers/Data/PluginKitPlugin/*
/var/mobile/Containers/Shared/AppGroup/*
/var/mobile/Containers/Shared/AppGroup (iOS 27)
This is not relevant to a jailbreak and never will be. Please don't mislead people into believing otherwise.