iOS 27.2 has a jailbreak now. It runs on an iPhone 11 Pro, it is open source, and it was published on GitHub on November 8 by Huy Nguyen, a researcher at Calif, the same team behind the untethered jailbreak shown on stage in Paris last month. It is the first public jailbreak environment for the latest iOS, and it is also the most demanding one yet. You need a Mac, a small hardware board, and a willingness to boot your phone from DFU mode every single time you want the jailbreak back.
The project is called doublera1n, and it is deliberately narrow. So far only one phone has been confirmed to boot it, an iPhone 11 Pro running iOS 27.2, build 24B119. Everything else is untested.
A second iOS, sharing the same system
Most dual-boot projects copy the whole operating system onto a second partition, which eats storage and invites trouble. doublera1n does something leaner. It leaves the phone’s stock System volume sealed and untouched, and creates a second Data volume that the system mounts as /private/var. The phone boots from pwned DFU mode with a patched kernel and iBoot, and a rootless jailbreak is installed on top of that second volume.
Because the System volume is shared rather than duplicated, the setup uses far less storage than a traditional dual boot. The trade is persistence. The jailbreak is not untethered. Every reboot sends the phone back to its normal, stock iOS, and getting the jailbroken environment back means putting the phone into pwned DFU mode and running the boot script again. A normal restart wipes the session clean, which is also, in a way, the safety net.
The demo image in the repository shows the result: an iPhone 11 Pro on iOS 27.2 with Sileo and Filza on the home screen, the App Store signed in, and apps running in windows. It looks like a working jailbreak because, on that second volume, it is one.
What you need to run it
The requirements list is short and strict. You need a Mac, Apple silicon or Intel, with Homebrew, and a usbliter8 board built around the RP2350 chip. The board is what puts the phone into pwned DFU mode over the Lightning port, and you need it, plus the computer, every time you want to re-enter the jailbroken environment. There is no Windows support in the setup script.
The README lists iOS 27.0 through 27.2 as the supported range on the main system, and the iPhone 11, 11 Pro and 11 Pro Max as the targets. The iPhone SE (2nd generation) and the iPad 9 are listed too, but as untested, so compatibility there should not be assumed. Only the iPhone 11 Pro on 27.2 has been confirmed to boot so far, and the developer is accepting issues and pull requests as wider testing happens.
What works, and what does not
The biggest limitation is the Secure Enclave. SEP is disabled for the second Data volume, so you cannot sign in to iCloud there. That is a hard limit of the approach, not a bug to be fixed later. On the other side, FairPlay still works, which means the App Store signs in and installs apps normally, and tweak injection into apps has been tested successfully.
The repository also notes fixes for the rough edges the developer hit while building it: Wi-Fi not reconnecting after a reboot, deep sleep panics, and SEP-less panics.
Why a hardware flaw beats a 160-fix update
The reason doublera1n works on iOS 27.2, the version that closed most of Calif’s chain, is that it does not use that chain at all. It builds on usbliter8, a SecureROM exploit for A12 and A13 chips disclosed in June 2026. SecureROM is the boot ROM, code burned into the silicon at the factory, and Apple cannot fix a flaw there with a software update. That is the same property that made checkm8 so durable on older iPhones.
Apple’s iOS 27.2 shipped on October 26 with more than 160 security fixes, several of them credited to Calif researchers, including Nguyen himself, who is credited in Apple’s security notes for CVE-2026-112692. Those fixes closed the software bugs behind the Paris demo. They cannot touch a boot ROM flaw. The cost is physical access: exploiting usbliter8 needs the board, the cable, and the phone in your hand.
Earlier community work paved the way here, and the repository credits it: usbliter8-fun by wh1te4ever, the original usbliter8 project, Liter8, and lycorine. Researchers had already booted a modified iOS 27 on an iPhone 11 Pro with usbliter8, tethered and with core features broken. doublera1n turns that into a usable, repeatable jailbreak environment.
How this differs from Calif’s Paris jailbreak
It is worth keeping the two projects separate, because they solve different problems on different hardware. Calif’s October 16 demo was an untethered jailbreak on an iPhone 18 Pro running iOS 27.0.1, using a chain of software vulnerabilities, with root access surviving a reboot on its own. Calif later showed the same approach beating Lockdown Mode and surviving an update to iOS 27.2, and the team has said the kernel exploit code and a full writeup are coming within about a week of November 3.
doublera1n is the opposite shape: older hardware, a hardware flaw instead of a software chain, and a jailbreak that vanishes on every reboot. It does not need Calif’s writeup, and it does not replace it. What it does is give owners of a 2019 phone a working jailbreak on the newest iOS today, while owners of newer iPhones still have nothing public at all.
iOS 27.2 closed most of the Calif chain, and Apple has since stopped signing iOS 27.0.1, which shut the downgrade path for everyone already on iOS 27. None of that affects doublera1n, because a boot ROM exploit does not care which version Apple is signing. The iPhone 11 Pro it was tested on is running the newest release, not a version held back for the jailbreak.
What to watch next
Two things will decide how much this matters. The first is wider testing: whether the iPhone 11 and 11 Pro Max, the SE 2 and the iPad 9 boot cleanly, and whether other iOS 27.x builds work as well as 27.2. The second is Calif’s promised kernel exploit code and writeup, due around November 10. Dopamine’s developer has already said he can add support for A12 and A13 devices quickly once that exploit is public, which would turn a research release into a tool ordinary users can actually install.
Until then, doublera1n is a researcher-grade project, and the developer’s own framing says so. It is for people who own the hardware, understand the risks of running modified firmware, and do not need the phone as a daily driver. For everyone else, the honest summary is unchanged: there is still no public jailbreak for iOS 27 on any iPhone newer than the 11, and any site offering one is selling something that does not exist.
