---
title: Calif demos an iPhone 18 Pro jailbreak that works with Lockdown Mode on, starts from an AirDrop'd PDF the user accepts, and stays after updating to iOS 27.2 | ctxsec
url: https://ctxsec.com/items/calif-iphone-18-pro-jailbreak-lockdown-mode-airdrop-pdf-survives-ios-27-2
description: "Security team Calif posted a video of an iPhone 18 Pro in Lockdown Mode being jailbroken after the user accepted a malicious PDF sent over AirDrop; the jailbreak remained after the phone was updated to iOS 27.2. Calif hasn't published how it works. It is not clear whether it can be installed on a phone already on 27.2. Calif has previously said it reports its findings to Apple and won't release a jailbreak tool for end users."
status: "researcher demo (Calif video on X, Nov 3, as reported by MacRumors). No technical details, CVEs or Apple response yet; not seen in attacks"
published: 2026-11-03
---

> Security team Calif posted a video of an iPhone 18 Pro in Lockdown Mode being jailbroken after the user accepted a malicious PDF sent over AirDrop; the jailbreak remained after the phone was updated to iOS 27.2. Calif hasn't published how it works. It is not clear whether it can be installed on a phone already on 27.2. Calif has previously said it reports its findings to Apple and won't release a jailbreak tool for end users.

[← Cybersecurity News](/news) · [markdown](/items/calif-iphone-18-pro-jailbreak-lockdown-mode-airdrop-pdf-survives-ios-27-2.md)

researcher demo (Calif video on X, Nov 3, as reported by MacRumors). No technical details, CVEs or Apple response yet; not seen in attacks

2026-11-03

### Calif demos an iPhone 18 Pro jailbreak that works with Lockdown Mode on, starts from an AirDrop'd PDF the user accepts, and stays after updating to iOS 27.2

It needs the target to accept and open a file, so it is not a zero-click attack, and there is no sign it has been used against anyone. It still matters for people who rely on Lockdown Mode: persistence across an update means patching alone may not clean a device that was already compromised.

**For high-risk users:** set AirDrop to Contacts Only or Receiving Off, don't accept files from unknown senders, and if you suspect compromise, restore the device rather than just updating it.

Sources: [MacRumors: iPhone jailbreak gets past Lockdown Mode and survives an update (Nov 3)](https://www.macrumors.com/2026/11/03/iphone-jailbreak-lockdown-mode/) · [Apple: About Lockdown Mode](https://support.apple.com/en-us/105120)