Apple has patched the AirLift vulnerability in the third beta version of iOS 27.2. This security flaw previously allowed users to bypass system restrictions and modify carrier settings on iPhones without performing a full jailbreak.
The exploit utilized the AirTraffic mechanism, which is designed for data synchronization between iPhones and Mac computers. By bypassing the iOS sandbox, the vulnerability enabled the use of the CarrierSIM utility to alter operator profiles.
In Russia, this method was used to activate features such as 5G, Wi-Fi Calling, and the EVS voice codec. These options were otherwise unavailable or hidden in the standard device configurations provided by local mobile operators.
According to the developer of the exploit, the vulnerability remains present in iOS 27.0, 27.0.1, and the first two beta versions of iOS 27.2. The fix is expected to be included in upcoming public releases of the operating system.
Users who applied modifications before updating their devices may retain the enabled features. However, these changes cannot be reapplied after a factory reset or if the device is updated to a version where the vulnerability is closed.
