A security researcher has demonstrated a software-only partial jailbreak for the Switch 2 console. This exploit provides "userland" access, allowing users to run homebrew applications, modify Switch 2 games, back up save files, and access most peripherals via MMIO.
The hack leverages the original Switch version of SmileBasic 4, a programming environment for Nintendo hardware. It is a "tethered" hack, requiring a macOS or Linux PC on the same network to run a node.js package that facilitates privileged system access.
The researcher, Sammy Hajhamid, used OpenAI's Codex with a custom harness to identify a 32-bit integer overflow when removing items from a SmileBasic array. This overflow provided access to an array pointer, enabling read and write access to system memory. Further investigation revealed a buffer overflow in the console's FileSystem services module, exposing a cached data pointer and granting arbitrary read/write privileges. This ultimately led to native code execution through a faked filesystem process.
As a proof of concept, Hajhamid, known online as Pepsipu, showcased modded characters in Mario Kart World. Other developers are also demonstrating simple applications and in-progress development tools running on the exploited hardware. This jailbreak opens the door for custom software and modifications on the Switch 2.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's briefNew every morning, and the back catalogue is archived by date.
A security researcher achieved a software-only partial jailbreak of the Switch 2, gaining userland access for homebrew, game modding, and save file backups. The exploit uses an integer overflow in SmileBasic 4 and a buffer overflow in the console's FileSystem services module.