Calif’s launch day iPhone Duo jailbreak clip got the attention, but the more useful news for Duo owners arrived a few hours earlier, in a firmware file. Researcher Johnny, known as @0xjohnny, downloaded the Duo’s just released iOS 27.1 firmware and checked it against the bugs he had been tracking. His verdict: two of them still appear unpatched on the Duo’s 27.1. If you own a Duo and care about a future jailbreak, 27.1 is the version to hold. Here is the build by build picture, and what to do before iOS 27.2 lands.
Two builds of iOS 27.1, and which one you have
The Duo ships with iOS 27.1 build 24A94232 in the box. Apple also released a day-one iOS 27.1 update, build 24A94425, which some buyers are prompted to install during setup. Johnny checked the newer build, 24A94425, released only for the Duo (device identifier iPhone19,4). His advice was blunt: do not update from iOS 27.1 if you hope for a jailbreak.
Both builds are iOS 27.1, and for jailbreak purposes that is the number that matters. No other iPhone will ever get 27.1, and other iPhones are expected to jump straight from 27.0.1 to 27.2. If you are on a Duo, your holding version is 27.1. If you are on any other iPhone, your holding version remains 27.0.1, the version Calif demonstrated in Paris.
The two bugs Johnny says are still open
The first is a potential SPTM bypass bug. SPTM is part of the secure boot and memory protection machinery that guards the most privileged parts of the system, so a bypass there is the kind of flaw that changes what an exploit chain can reach. The second is Johnny’s own sandbox escape, which he calls Airlift. A sandbox escape is what lets code break out of the restricted environment apps normally run in.
Airlift had already been noted as patched in iOS 27.2 beta 3 on other devices. On the Duo’s 27.1, Johnny says it still appears open. He followed up by saying both the SPTM bug and parts or all of the Calif chain are expected to be patched in 27.2, and that a 27.2 release candidate firmware for the Duo had not yet appeared at the time of his check, though it would very likely carry the same patches.
There is an important caveat, and Johnny stated it himself. He later clarified that the SPTM rumors may have been exaggerated, and that Calif may not have used an SPTM bypass in the Paris demo itself. So the honest reading is narrower than the headlines: two tracked bugs appear unpatched in the Duo’s 27.1 firmware, not that a working Duo jailbreak chain has been proven from them. An IPSW check is a binary level look at a firmware file, not a running exploit.
Step 1: confirm you are on iOS 27.1
Open Settings, then General, then About, and check the iOS Version line. On a Duo it should read 27.1. If you installed the day-one update during setup, you are on build 24A94425, which is the build Johnny checked. Either 27.1 build keeps you in the window. What ends the window is moving to 27.2.
Step 2: turn off Automatic Updates
Go to Settings, General, Software Update, Automatic Updates, and turn it off. This is the single most consequential setting, because a phone left on automatic updates can install 27.2 overnight the week it ships, and there is no undo. Apple typically stops signing the older version within days of a public release, so an accidental update is usually permanent.
Step 3: do not install iOS 27.2, and do not join the beta
When 27.2 arrives, expected in the week of October 26, decline it for as long as you want to preserve the option. If you are not already on the beta program, stay off it: a beta build moves you off 27.1 just as surely as the public release does. If a future jailbreak tool ever appears for the Duo, assume it targets 27.1 until researchers say otherwise, and treat every other version as unknown.
The other side of the coin
A guide like this can read as a recommendation to stay behind, so here is the counterpoint, plainly. For most Duo owners, installing 27.2 the day it ships is the right call. The same bugs that power a jailbreak demo are the kind of flaws that security researchers report precisely because they matter, and an unpatched phone carries every other known issue too. If you are not actively following the jailbreak scene, you are in the update camp, and you should stay there.
That applies with extra force to anyone in a high risk category, such as journalists, activists, and executives handling sensitive material. For those readers, Lockdown Mode under Settings, Privacy and Security is the strongest built-in defense Apple ships, and it shuts down several of the attack surfaces that message based exploits depend on.
What happens next
Two events will settle the Duo question. The first is the iOS 27.2 release for the Duo, with its security notes, which will show which bugs Apple actually fixed. The second is whether Calif or anyone else publishes usable details or a tool while 27.1 is still current on Duo devices. Until then, the status is unchanged in one important way: there is no Duo jailbreak you can download, only a six second clip and a firmware file that still looks open. Staying on 27.1 costs nothing, and it is the only move that keeps the door unlocked.
And the warning that belongs in every jailbreak article this month: any website offering an iPhone Duo jailbreak download right now is a scam. Calif posted a clip, Johnny posted an analysis, and neither of them posted a tool.
