[Beta OS 27] Managed Open-In Restrictions Bypassed via Photos and Shortcuts in iPadOS 27 Beta

I am currently testing Managed Open-In restrictions in an MDM-managed environment on iPadOS 27 beta.

I have observed that the restrictions "allowOpenFromManagedToUnmanaged" and "allowOpenFromUnmanagedToManaged", even when set to false, are still being bypassed in certain scenarios.

Specifically, I observed two issues:

Photos App – Images opened from a managed application can still be saved using the Save to Photos option.

Shortcuts App – Custom Shortcuts triggered from the Share Sheet can accept managed content, compress it into an archive, and share that archive with unmanaged applications, effectively bypassing the Managed Open-In restrictions.

According to the iPadOS 27 beta release notes, both of these issues were marked as resolved. However, they remain reproducible in my testing on a supervised MDM-enrolled device.

I have submitted a detailed report with a sys diagnose log via the Feedback Assistant (FB ID:FB23316986).

[Beta OS 27] Managed Open-In Restrictions Bypassed via Photos and Shortcuts in iPadOS 27 Beta
 
 
Q