A security researcher has jailbroken the Nintendo Switch 2 with a software-only exploit, the first public crack of the console that needs no modchip, no soldering and no hardware tricks. The exploit, dubbed ns2jb, was unveiled on October 22 by Sammy Hajhamid, who posts online as pepsipu, and it runs on Switch 2 system firmware 23.0.1, the console’s latest version.
An AI helped find the way in
What makes the breakthrough unusual is the tool that helped find it. Hajhamid says he used OpenAI’s Codex to assist the vulnerability research, running the AI coding agent against the console through a custom harness: a JetKVM for HDMI capture and USB input, plus a SwitchBot to press the power button. Over roughly two weeks, Codex probed SmileBASIC’s language interpreter, tested hypotheses and helped develop parts of the exploit chain, though an early attempt through the Switch 2’s WebKit browser failed first.
The entry point is an unlikely one. ns2jb chains a 32-bit integer overflow in the Switch 1 version of SmileBASIC 4, a programming app that runs on Switch 2 through backward compatibility, with a buffer overflow in the console’s filesystem service. The result is native code execution with system-module-level permissions: homebrew, game modding, save backups and peripheral access. To prove it, Codex modded Peter Griffin, Hatsune Miku, Cinnamoroll and Red from Angry Birds into Mario Kart World, a Switch 2 exclusive, in about a day.
Tethered, limited and already being closed
The jailbreak is tethered: it does not survive a reboot, so powering the console off wipes the exploit from memory and forces a repeat of the whole procedure. It stops short of kernel control, meaning no custom firmware and no piracy path. Setup is fiddly, needing SmileBASIC 4 version 4.4.9, about $25 on the US eShop, and a macOS or Linux computer on the same network running a Node.js package.
Nintendo is already closing the door. The company appears to have pulled SmileBASIC 4 from the UK eShop, with US and European listings expected to follow, and it has not commented on the exploit. The technique may outlive any single app: another modder has already posted footage of a similar exploit built on a demo for an unrelated title.
Independent researchers say the work is real. Gezine, the developer behind a separate universal exploit for the original Switch and Switch 2, spoke with Hajhamid and reviewed the code, calling it legit. Wccftech watched the demo video and checked the repository, reaching the same conclusion. The full chain is published on GBAtemp with source code on GitLab.
AI coding tools have driven a surge of console reverse engineering this year, and researchers have cracked nearly every recent PlayStation 5 firmware, a scene Game Beacon has followed through the PS5SX2 homebrew releases jailbroken PS5s playing original PS2 discs and dumping PS2 discs. The original Switch was broken unusually early and piracy became a persistent headache for Nintendo. Sixteen months after the Switch 2’s launch, an AI-assisted crack is a warning shot for a company whose hardware bet depends on a closed ecosystem, even a tethered one.
Sources: Nintendo Life, Digital Trends, technology.org, The Loadout
