Apple iOS and iPadOS Activation Lock Bypass Vulnerability

A path handling vulnerability has been identified that allows a user with physical access to an iOS device to bypass Activation Lock. This issue affects Apple iOS devices and is present in versions prior to iOS 26.2 and iPadOS 26.2, as well as in iOS 18.7.7 and iPadOS 18.7.7. The vulnerability arises from inadequate validation in the path handling process, which could be exploited to manipulate Activation Lock settings.

Impact

Exploitation of this vulnerability allows for bypassing Activation Lock, a security feature designed to prevent unauthorized access to a device.

Remediation

Users can update to iOS 18.7.7, iPadOS 18.7.7, iOS 26.2, or iPadOS 26.2 to address this vulnerability.