What changed
A researcher known as Pepsipu has demonstrated a software-only, tethered jailbreak for Nintendo’s Switch 2. The exploit works on firmware 23.0.1 and reaches userland access and native code execution, enabling homebrew, game modification, save backups and access to many peripherals.
The chain starts with a 32-bit integer overflow in SmileBasic 4, then uses a separate buffer overflow in the console’s FileSystem services. A macOS or Linux computer on the same network and a Node.js package are required.
Why it matters
This turns the Switch 2 from a sealed appliance into a limited development platform. Researchers can now inspect system behavior, build tools and modify games. Pepsipu has already shown new characters running in Mario Kart World, while other developers have demonstrated homebrew experiments and a working Vulkan GPU implementation in userland.
The limitation matters just as much as the breakthrough. The exploit remains inside a sandbox and does not provide kernel-level control, so it is not full ownership of the hardware. For Nintendo, that makes this a serious security problem with a narrower blast radius than a permanent, unpatchable compromise.
Nintendo has delisted SmileBasic 4 worldwide from its eShop, which may reduce access for Switch 2 owners who never bought or downloaded it. That does not erase the vulnerability for existing users, and developers are already teasing possible exploits involving other games.
Nintendo is likely to patch this chain in a coming firmware update. That would close the current route, but it could also leave users choosing between access to Nintendo services and continued experimentation with the jailbreak. Whether the Japanese SmileBasic demo remains exploitable, and whether the other teased exploits work in practice, is still uncertain.
Comments
No comments yet.