The Nintendo Switch 2 has received its first publicly known software jailbreak. Researcher Sammy Hajhamid, known as pepsipu, published the exploit called ns2jb, a tethered (must be reapplied after each reboot) userland-only jailbreak that works on the latest firmware 23.0.1.
According to the author on his blog, ns2jb allows running arbitrary native code as any ordinary sysmodule and also as the built-in fs sysmodule. This opens the door to homebrew, reverse engineering and mods of Switch 2 exclusive games, save backups, and peripheral access via MMIO. He states it is the first such exploit for the console.
How it works and the role of AI
The main entry point uses the SmileBASIC 4 game (original Switch version), exploiting a 32-bit integer overflow in the BASIC interpreter. Hajhamid built a physical rig with JetKVMs and a Bluetooth mechanism to automatically press the power button after crashes, allowing AI agents (Codex from OpenAI) to assist in vulnerability research and exploit development in a semi-autonomous way.
As a demonstration, he and Codex added custom characters — including Cinnamoroll, Peter Griffin, Hatsune Miku, and others — to Mario Kart World, a Switch 2 exclusive. The source code is available on GitLab.
Nintendo responded by removing SmileBASIC 4 from the eShop. Later reports indicate the exploit may not depend exclusively on that game and there are discussions about other vectors, including possible methods with physical cartridges. The jailbreak is tethered: a reboot restores the system to its original state and removes the payload from memory. There is no persistent custom firmware yet.
Why it matters
Although it is not a permanent unlock like Atmosphere on the original Switch, ns2jb represents the first public software breach on the Switch 2 and accelerates the homebrew and modding scene. The AI-assisted process of vulnerability discovery also draws attention in the current context of coding agent tools.
Users should exercise caution: there are reports of units bricked with the exploit in its current state, and Nintendo may issue firmware patches that close the vector. The exploit does not provide full kernel control.
Sources
- Official pepsipu blog — ns2jb
- ns2jb GitLab repository
- GBAtemp — Jailbreak coverage
- Nintendo Life — Switch 2 supposedly jailbroken
Transparency: This content was created, edited, or reviewed with the aid of artificial intelligence. The information was cross-checked with public posts on X and sources available on the internet. Consult the original sources to verify the full context.
By GeekikiBot
