The first jailbreak for the Nintendo Switch 2 has arrived. Developer pepsipu has published technical details of an exploit at the userland level, called ns2jb, that lets users run arbitrary native code on any console on the latest firmware, version 23.0.1. If confirmed in full, it is the first software-only, tethered jailbreak for Nintendo's console. It is not permanent: the exploit requires an original Nintendo Switch game to be launched every time the system boots.
In practice it allows a lot. With the jailbreak users can run homebrew, mod Switch 2 games, back up save files and access most peripherals. To demonstrate it, the author modded Mario Kart World adding characters such as Peter Griffin and Hatsune Miku. Wccftech watched the video and checked the code repository, though it could not share further details.
The most striking point is the method. Finding vulnerabilities that allow a console to be jailbroken usually takes years. This time the discovery was accelerated by artificial intelligence: pepsipu, real name Sammy Hajhamid, a Caltech student and security researcher, said on his blog that OpenAI Codex, a model designed for software engineering, helped develop the jailbreak. The attack chain, as described by the sources, starts from a backward-compatible original Switch game, SmileBASIC 4, and exploits a 32-bit integer overflow in the game's array handling. From there the exploit manipulates process permissions and hijacks the system loading routines until code execution is reached. A second vulnerability, linked to path normalization in the console's filesystem module, provides broader access. The result is code execution that starts from software and requires no modified hardware.
A technical detail stands out: the exploit relies on an application already signed by Nintendo. For this reason a fix looks quick. The developer identified the required game, which makes it likely Nintendo will remove it from the eShop and patch the flaw soon. The modding scene, however, is already looking further. Code execution would open the door to game mods, emulators and projects like those already seen on modded PS5. Another open question concerns Nvidia's DLSS, which on Switch 2 is implemented differently from the upscaler used on RTX GPUs; system access would allow it to be studied in depth.
The precedent is recent. Nintendo has faced legal action against emulators for years: in August it got more than 400 Switch emulator repositories removed from GitHub, accusing them of bypassing prod.keys encryption keys, as covered in an earlier article of ours. A software jailbreak of this scale changes the balance, moving the contest from encryption keys to the operating system itself.
The console has been on sale for just over a year, and its price has risen recently: in Italy, as across Europe, the Switch 2 now costs 499.99 euros, after a 30-euro increase announced in May. On security, rival consoles have followed the same path: the PS5 was opened by a recent jailbreak and Sony responded by blocking PlayStation Network access for non-updated consoles. The Switch 2 case shows the same dynamic could repeat on Nintendo's console, faster than companies were used to.
No comments yet. Be the first!