A path traversal vulnerability in iOS and iPadOS was addressed by improved path validation. This flaw could allow an attacker with physical access to a trust-paired device to read and write arbitrary files. The issue is fixed in iOS 26.7, iPadOS 26.7, iOS 27, and iPadOS 27.