Apple releases iOS 11.2.1 to restore limited HomeKit functionality
A HomeKit security vulnerability allowed unauthorized access to smart devices.
Apple has released iOS 11.2.1 for iPhone and iPad following last week's discovery that HomeKit had a major security vulnerability. The bug, first reported by 9to5Mac, allowed unauthorized users to access connected smart devices like lights, thermostats, locks and garage door openers. Apple's server-side fix of the issue corrected the problem but also disabled remote access to shared users. That functionality is now restored with the update.
The iOS 11.2.1 update says it "fixes bugs including an issue that could disable remote access to shared users of the Home app." Apple has also released tvOS 11.2.1, which 9to5Mac says is likely related to the same issue. Both updates are rolling out to iPhone, iPad and Apple TV users now.
