TL;DR
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
A researcher writing under the name pepsipu says they developed ns2jb, a software-only, tethered jailbreak for Nintendo Switch 2 on firmware 23.0.1. The report describes running native code in system modules and demonstrates a Mario Kart World mod, but the supplied material does not establish how widely the jailbreak works, whether Nintendo has responded, or whether the method is safe or practical for general users.
Researcher pepsipu says they have developed ns2jb, a software-only, tethered jailbreak for Nintendo Switch 2 running firmware 23.0.1. The reported access allows native code to run as system modules, enabling homebrew and game modification, and the researcher demonstrated the work with a modified version of Mario Kart World; independent verification and practical availability are not established in the supplied report.
The researcher describes ns2jb as tethered, meaning the jailbreak is not presented as a permanent change that survives every restart. The report says it can run arbitrary native code as an ordinary system module and as the built-in file-system module, illustrating the risks explored in The Switch: You Never Owned the AI You Depend On. Claimed uses include running homebrew, reverse-engineering and modifying games, backing up save files, and accessing many hardware peripherals.
The report says the effort took about two weeks. It also describes a demonstration in which the researcher modified the Switch 2 exclusive Mario Kart World, adding characters. The post says the game modification itself was made in a day with Codex, an AI coding tool. The author clarifies that a caption suggesting Codex was simply prompted to jailbreak the console was a joke: a userland-code-execution goal did not succeed, and the jailbreak required substantial work.
The described route combined an initial browser exploit attempt with work on a Nintendo Switch game. The author says a WebKit vulnerability loaded through a custom Wi-Fi captive portal provided control-flow hijacking, but that approach faced protections including execute-only memory, pointer authentication and control-flow integrity. The report then details a memory-corruption bug in the Switch 1 game SmileBASIC and says it led to return-oriented programming. The supplied source ends while discussing efforts to obtain access to more privileged system modules, so it does not provide a complete technical account of the final chain or its limitations.
What the Jailbreak Could Enable
If the reported capabilities are accurate, ns2jb would give researchers and developers a way to run unauthorized native code on Switch 2 and study software that is otherwise difficult to inspect. The author lists homebrew, game modifications and save-file backups among possible uses, and the Mario Kart World demonstration shows one claimed application beyond a technical proof of access.
The report also matters because it describes a chain involving both a Switch 2 browser attack surface and a vulnerability in a Switch 1 game. That account may be of interest to console-security researchers and Nintendo, but it does not by itself show that the method is reliable for ordinary owners, works on other firmware, or can be used without risks to a console or account. A jailbreak can also raise legal, security and online-service concerns; the source does not set out guidance on those issues.
As an affiliate, we earn on qualifying purchases.
How the Report Says It Worked
The author says they initially explored WebKit, a browser engine commonly targeted in console research. According to the post, a WebKit vulnerability provided control-flow hijacking but did not readily translate into arbitrary calls to system services because of protections such as pointer authentication and control-flow integrity. The author presents this as a difficult path rather than the completed basis for all the jailbreak’s reported privileges.
The post then describes targeting SmileBASIC, a Switch 1 game, whose interpreter allegedly contained a 32-bit integer overflow while removing array elements. The author says the bug enabled out-of-bounds memory access and eventually return-oriented programming. The report presents this as one step in a broader exploit effort, but the supplied material does not fully document how that access was turned into the final Switch 2 system-module privileges.
For testing, the researcher describes using automated equipment to send controller inputs and capture video from the consoles, along with a mechanism to press the power button after crashes. Those details support the account of sustained experimentation; they do not independently verify the security claims.
“ns2jb is a software-only, tethered jailbreak for the Switch 2.”
— Pepsipu, author of the ns2jb report
Nintendo Switch 2 screen protector
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Limits Still Need Verification
The supplied report is the source for the claims about firmware 23.0.1, system-module access and the game modification. It does not include independent testing, a response from Nintendo, or enough detail to establish whether the exploit works across different devices or only under particular hardware and software conditions. The author’s statement that it is the first exploit of its kind is explicitly qualified as being to their knowledge.
It is also unclear from the supplied text how the full chain reaches the stated privileged access, how users obtain and run it in practice, or whether subsequent firmware updates block it. The report says a copy is available from an ns2jb repository, but that alone does not establish the repository’s safety, the method’s reliability, or whether downloading or using it carries risks. The source material provided here stops before the technical discussion is complete.
Nintendo Switch 2 microSD Express card
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
What Researchers May Clarify
The next key developments would be a fuller technical write-up, reproducible testing by independent security researchers, and clarification of which Switch 2 configurations and firmware versions are affected. Any update from Nintendo about the reported vulnerability or a possible software fix would also help establish the current status.
For now, readers should treat the capabilities as the researcher’s reported findings, not as independently confirmed instructions or a guarantee that the jailbreak will work on a particular console. The report does not specify a timetable for further disclosure, Nintendo’s response, or updates to ns2jb.
As an affiliate, we earn on qualifying purchases.
Key Questions
What is ns2jb?
ns2jb is the name the researcher gives to a software-only, tethered jailbreak reportedly affecting Switch 2 firmware 23.0.1. The report says it can run native code in system modules.
What does tethered mean in this report?
The researcher describes the jailbreak as tethered, rather than a persistent modification. The supplied material does not explain the exact restart or reactivation process.
What did the Mario Kart World demonstration show?
The author says they modified Mario Kart World to add characters. The post describes this as a demonstration and says the game modification took a day; it does not establish that the modified game is broadly available.
Has the jailbreak been independently confirmed?
Not in the supplied source material. The claims come from the researcher’s report; it includes no independent verification or Nintendo response.
Does the report say the jailbreak works on every Switch 2?
No. It identifies firmware 23.0.1, but does not establish compatibility across devices, other firmware versions, or future updates.
Source: hn
Halloween Picks
halloween
As an affiliate, we earn on qualifying purchases.
