An attacker who gains physical possession of a locked iPhone or iPad can bypass the Digital ID authentication mechanism when iPhone Mirroring is enabled. The vulnerability exploits the device’s state‑management logic, allowing the attacker to gain privileged access to the device’s content and services despite the lock screen. This constitutes an authentication bypass that could expose sensitive information to the attacker, with the risk confined to the device itself.

Apple’s iOS and iPadOS platforms are affected. All versions before the 27th release are vulnerable; the flaw is corrected in iOS 27 and iPadOS 27.

The EPSS score is <1%, and the vulnerability is not listed in the KEV catalog, indicating no public exploitation has been observed. Because the attack requires physical access to a locked device and Mirroring to be active, the attack vector is offline and limited in scope. The CVSS score of 2.0 indicates low severity, yet the authentication bypass flaw could still reveal sensitive data if exploited. Nonetheless, the practical likelihood is reduced by the need for physical proximity and the requirement that Mirroring be enabled at the time of exploitation.