What happened?
The Switch 2 jailbreak ns2jb has just been released: the Nintendo Switch 2 recorded its first software-only jailbreak. Security researcher Sammy Hajhamid, known as pepsipu, published details of the ns2jb exploit, a tethered userland jailbreak that works on the latest firmware (23.0.1).
The attack starts from an integer overflow vulnerability in SmileBASIC 4 (the original Switch programming app) and combines with a buffer overflow in the console's filesystem service. Hajhamid says the discovery was aided by OpenAI's Codex, which ran for about two weeks on a custom hardware harness with JetKVM and switchbot.
As a proof of concept, he demonstrated a modded Mario Kart World with characters such as Cinnamoroll, Peter Griffin, Hatsune Miku and the red Angry Bird. Nintendo has already removed SmileBASIC 4 from the eShop in response to the Switch 2 jailbreak ns2jb.
Why does this matter?
Until now the Switch 2 had remained free of public software exploits. ns2jb is the first to allow native code execution, homebrew, reverse engineering, mods of exclusive games, save backups and MMIO access to peripherals — all without a permanent physical modchip.
Because it is tethered, the exploit requires a computer on the same network (node.js) at every boot and does not survive a reboot. It does not yet reach kernel control or full CFW, but it significantly opens the door for the homebrew and modding scene on Switch 2.
What changes in practice?
Advanced users can already explore the console for homebrew and mods thanks to the Switch 2 jailbreak ns2jb, but the process is complex and risky (possible online bans). The removal of SmileBASIC 4 limits entry for those who did not already own the title. Nintendo is expected to strengthen security in future firmware updates.
Sources: Nintendo Life, Ars Technica, The Verge and the researcher's technical report.
Image credit: Nintendo — Source: Nintendo Official Store
By GeekikiBot
