Researcher Achieves Software-Only Partial Jailbreak of Nintendo Switch 2 via SmileBasic 4

4.0 · 9d ago · WORLD · TECH

The Facts

  • Security researcher Sammy Hajhamid (online as Pepsipu) demonstrated a software-only partial jailbreak of the Switch 2 giving 'userland' access, which he says allows running homebrew, reverse engineering and modding games, backing up save files, and accessing most peripherals via MMIO. Ars Technica only
  • The exploit uses the original Switch version of SmileBasic 4 and is 'tethered': it requires a macOS or Linux PC on the same network running a node.js package. Ars Technica only
  • Hajhamid says he used OpenAI's Codex with a custom harness (USB commands, HDMI output viewing, Bluetooth light-switch device for power cycling) and after about 2 weeks found a 32-bit integer overflow when removing items from an array in SmileBasic, giving read/write access to parts of system memory. Ars Technica only
  • He then found a buffer overflow in the console's FileSystem services module exposing a cached data pointer with arbitrary read/write, leading to native code execution through a faked filesystem process. Ars Technica only
  • As proof of concept, Hajhamid showed modded characters in Mario Kart World; others have shown demos and in-progress developer tools, including a Vulkan GPU working in userland. Ars Technica only
Dive deeper · 3 more factsShow less
  • The exploit works on Switch 2 firmware 23.0.1 and does not provide kernel-level access. Ars Technica only
  • SmileBasic 4 has been delisted from the Switch eShop worldwide, though a Japanese demo version was reportedly still accessible at publication time. Ars Technica only
  • The 3DS version of SmileBasic was used in the 2016 'smilehax' exploit, after which Nintendo removed it from the 3DS eShop. Ars Technica only

Context

A researcher has demonstrated a partial, userland-level jailbreak of the Nintendo Switch 2, just over a year after its release. The exploit chain starts with a bug in SmileBasic 4's interpreter and escalates through a filesystem services flaw, but it does not reach kernel-level control.

According to Ars Technica, the vulnerability is likely to be patched in upcoming firmware, and other community members are teasing similar exploits using other games. Nintendo had not commented in the provided article.

How the Agent Panel Scored This

Independent AI personas each scored importance 1–10; the story's score is a trimmed mean (highest and lowest votes dropped). Vote spread: 2.

5 Critical Reader A verified, demonstrated partial userland jailbreak of a major current console is a concrete security milestone affecting many Switch 2 owners and modders, but it is limited to userland, tethered, and firmware-specific, with no kernel access and likely imminent patching.
4 Science & Tech Analyst A partial, userland-only jailbreak of a popular console with a tethered, firmware-specific exploit is a notable security/modding story with limited broad impact, since it does not reach kernel-level control and is likely to be patched.
4 Business Analyst A concrete security exploit enabling partial userland access on a major console is notable for gamers and Nintendo, but it is a niche hacking development with no kernel access, no direct market-moving effect, and limited broad economic impact.
4 Informed Citizen A concrete security exploit enabling partial userland access on Switch 2 is notable for hobbyists and the modding community, but it is a niche, partial, tethered jailbreak that is likely to be patched and does not meaningfully affect ordinary users within a week.
4 News Editor A concrete, notable security demonstration of a partial jailbreak on a popular console, but it is tethered, userland-only, niche to hobbyists and modders, and affects a limited audience rather than the broad public.
4 Policy Expert A security researcher demonstrated a partial, userland-only jailbreak of the Switch 2 that is tethered, firmware-specific, and lacks kernel access, which is a notable niche tech/security event with limited immediate broad impact on consumers but a concrete new exploit.
3 Global Affairs Analyst A partial, userland-only console jailbreak demonstrated by one researcher is a niche tech/security story with limited broad impact, though it is notable within the gaming and security communities.

Source

← All stories