Switch 2 partly jailbroken in software, unlocking homebrew and save access
The exploit reaches userland access but stays tethered to a nearby macOS or Linux machine and the original Switch build of SmileBasic 4.
A security researcher has shown that the Nintendo Switch 2 can be partly jailbroken using software alone, reaching a userland level of access. That access is enough to run homebrew software, reverse engineer and modify games, extract save files, and reach most peripherals through memory-mapped I/O. The exploit depends on the original Switch build of SmileBasic 4 and needs a macOS or Linux machine on the same network to run a Node.js package that unlocks privileged functions, which makes it tethered rather than standalone. The researcher, Sammy Hajhamid, used OpenAI's Codex to probe the SmileBasic interpreter through a custom rig that sent USB commands and read output over HDMI. After about two weeks of work, that rig turned up a 32-bit integer overflow triggered when items are removed from an array, which exposes an array pointer and therefore read and write access to parts of system memory.
Why it matters
The exploit gives people who mod consoles a route to homebrew, game modification and save backups on the Switch 2 without hardware changes. It is tethered, though: it needs a macOS or Linux PC on the same network and an older SmileBasic 4 build, which limits who can use it. The finding also shows that a memory flaw in a bundled interpreter can expose system memory, so the security of the console depends on software it ships with, not only on its core system.
Matters or hype?
Does this story matter, or is it hype? Vote before you see what everyone else said.