Security firm Calif posted photos and video on Friday, October 23 that appear to show an iPhone Duo jailbreak. The foldable went on sale the same day, and the posts show system folders and a customized home screen.
Huy Nguyen, a Calif employee, shared a photo captioned “Hi from Calif” that shows the file browser open on a foldable iPhone, accessing /var which hints towards root access on the device.
Calif Showed File Access and a Custom Home Screen on the iPhone Duo
The photo lists folders such as audit, boot, buddy, containers, datamigrator, db, dextcores and dirs_cleaner. Replies call the app Filza, a file manager long tied to jailbroken iPhones, though the app’s name is not visible in the shot. On a stock iPhone, /var is where iOS keeps app containers, databases and logs, and apps and users cannot browse it.
Calif’s own account followed later with a short video of the home screen with custom widgets, including one with an animated character, and tagged @pwnlambda.
No iOS Version, Exploit or Release Date Has Been Named
Neither post names an iOS build, an exploit or a tool. Calif’s blog post from October 16 says everything will be released in due time, and it gives no date.
The iPhone Duo ships with iOS 27.1, a build Apple released for the foldable only. Apple’s security releases page lists no CVE entries for it. The posts do not say whether the demo ran on iOS 27.1 or on a newer build.
Replies under both posts split between excitement and doubt. One described the clip as a seven-second video that could be easily faked, and others asked when a release would come.
The Demo Follows Calif’s Untethered iPhone 18 Pro Jailbreak From a Week Ago
On October 16, Calif showed an untethered jailbreak on an iPhone 18 Pro running iOS 27.0.1 on stage at Hexacon in Paris. The phone restarted during the demo and root access came back without a computer attached. The same session included a Signal one-click demo and an iMessage demo. Calif has not tied the iPhone Duo posts to that work.
Public jailbreaks have trailed new iPhones by a wide margin. Dopamine 3.0, the first public jailbreak for iOS 26, arrived 326 days after launch and covers only iOS 26.0 and iOS 26.0.1 on A12 and A13 chips.
