TL;DR
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
A report published by pepsipu.com describes ns2jb, a software-only, tethered jailbreak that its author says works on Switch 2 firmware 23.0.1. The author says it can run native code in system modules and enable homebrew and game modding, but the supplied report excerpt does not establish independent verification, Nintendo’s response or the exploit’s availability to typical users.
A researcher writing at pepsipu.com says they developed ns2jb, a software-only, tethered jailbreak for Nintendo Switch 2 running firmware 23.0.1. The author says it can run native code in ordinary and built-in system modules, a capability that could support homebrew, save-file backups and game modding; those claims have not been independently verified in the supplied material.
The author describes ns2jb as a way to execute arbitrary native code with the privileges of selected system modules, rather than as a browser-only exploit. The report says this could allow users to run homebrew software, reverse engineer or modify Switch 2 games, copy save files from the console and access many peripherals. “Tethered” means the jailbreak requires a connection or process to be repeated after a restart; the excerpt does not give a full user-facing setup guide or clarify the precise recovery steps.
One demonstration described in the report is a modified version of Switch 2 game Mario Kart World. The author says the game was altered to add characters, and notes the modification was made in a day as a demonstration. That is the author’s account, not evidence in the supplied material of a publicly released mod, broad compatibility or an easy process for other owners to reproduce.
The account says the work took about two weeks. It describes an initial attempt to get code execution through the console’s WebKit browser, using a custom Wi-Fi captive portal and a WebKit vulnerability the author calls an “n-day.” The report says that route ran into protections including execute-only memory, pointer authentication and control-flow integrity. The excerpt then describes a separate route through the Switch 1 version of SmileBASIC, but ends before explaining the complete chain that reached privileged Switch 2 system modules.
What System-Level Access Could Enable
If the account is accurate, ns2jb would matter because the reported access goes beyond running code inside a single game or browser process. The ability to execute native code in system modules could give researchers a platform for studying console software and could enable homebrew and game modifications that Nintendo’s standard retail environment does not support.
The same capabilities raise practical and security concerns. A jailbreak could affect the integrity of game saves or online play and could expose users to risk if they install untrusted software. The report does not establish that ns2jb has been used to compromise other people’s consoles, bypass online safeguards or distribute malicious code. It also does not say whether Nintendo has responded or released a firmware update addressing the reported method.
For owners, the firmware qualification matters: the author identifies version 23.0.1 as the target. The account does not show whether other versions are affected, whether the method works on ordinary retail devices without additional equipment, or whether a future system update would close the vulnerabilities.
Nintendo Switch 2 homebrew software
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
The Reported Exploit Chain
The author says the initial browser approach was attractive because WebKit is a common target in console research, but that gaining browser code execution did not by itself provide the ability to make arbitrary inter-process communication calls. The report cites hardware and software protections that complicated turning that foothold into the access needed for system-module control. It does not provide a complete account of the final escalation path in the material supplied here.
Instead, the researcher says they examined SmileBASIC, a Switch 1 game, and found an integer-overflow bug in its array-removal operation. According to the report, the bug could cause an out-of-bounds memory read and write, which the author used to develop a return-oriented programming chain on a Switch 1 console. The author says this work ran alongside the Switch 2 browser investigation. The excerpt stops during the discussion of choosing a privileged system module, so it does not establish how the complete chain connected the two systems or reached the claimed Switch 2 privileges.
The author also describes using remote-control and video equipment to automate interaction with the consoles. They explicitly clarify that a joking caption about instructing an AI coding agent to jailbreak the system was not a literal prompt that produced the result. The author says the exploit required substantial work over roughly two weeks; the Mario Kart modification, by contrast, was made in a day.
““ns2jb is a software-only, tethered jailbreak for the Switch 2.””
— The ns2jb report’s author
Verification and Compatibility Remain Open
The supplied account is a first-person technical report. It does not include independent reproduction, confirmation from Nintendo or an assessment by another security researcher. The author calls the method, to their knowledge, the first exploit of this kind for Switch 2, but the material provided does not independently establish that claim.
Several operational details remain unresolved in the excerpt: the full exploit chain, the exact steps required to run it, which hardware and software conditions are necessary, and whether users can obtain and use a working copy. Although the report points readers to an ns2jb repository, the supplied text does not establish the repository’s current contents or whether it contains a complete, safe, end-user release. It is also unclear whether firmware versions other than 23.0.1 are vulnerable, whether the jailbreak survives a reboot, and what Nintendo may do in response.
Release Details and Nintendo Response
The next useful milestones would be publication of the complete technical chain, independent testing on retail Switch 2 hardware and clarification of the repository’s contents and supported firmware. Those steps could help separate the author’s demonstrated capabilities from features that have not yet been independently confirmed.
Nintendo’s response is not included in the supplied material. A system update, security advisory or statement from the company could clarify whether the reported weakness is known or addressed. Until more evidence is available, Switch 2 owners should treat the capabilities and compatibility described by the author as reported claims, not independently established results.
Key Questions
What is ns2jb?
It is the name the report’s author gives to a software-only, tethered Switch 2 jailbreak. The author says it can run native code in system modules. The supplied material does not include independent verification of those claims.
Which Switch 2 firmware does the report identify?
The author identifies firmware 23.0.1 as the current latest version targeted by ns2jb in the report. The material does not say whether other firmware versions are vulnerable.
What does the author say the jailbreak can do?
The report says it could enable homebrew, game modification, reverse engineering and save-file backups, along with access to many console peripherals. These are capabilities claimed by the author and have not been independently confirmed in the supplied material.
Is the jailbreak independently confirmed or ready for general users?
The supplied source is the researcher’s own account and includes no independent reproduction or Nintendo confirmation. It also does not establish that there is a complete, safe, easy-to-use release for ordinary console owners.
Does the report say Nintendo has responded?
No Nintendo response is included in the supplied material. Whether the company has investigated the reported exploit or plans a firmware change is unclear.
Source: hn
Halloween Picks
halloween
As an affiliate, we earn on qualifying purchases.
