Technology··1 min readTechnical readSource-backed

Switch 2 security takes a hit as hackers unlock homebrew access

Security researcher Sammy Hajhamid has demonstrated a software-only partial jailbreak for the Nintendo Switch 2, achieving userland access that allows homebrew software execution and game modding.

By
WIREUNWIRED BRIEF

Security researcher Sammy Hajhamid has demonstrated a software-only partial jailbreak for the Nintendo Switch 2, achieving userland access that allows homebrew software execution and game modding. Writing under the online handle Pepsipu, Hajhamid reported that the tethered exploit targets the original Switch version of the SmileBasic 4 interpreter. Working alongside OpenAI’s Codex, the researcher spent about two weeks discovering a 32-bit integer overflow when removing items from a SmileBasic array.

This flaw exposed an array pointer, granting memory read and write privileges. A subsequent buffer overflow in the console's FileSystem module then enabled arbitrary code execution and privileged filesystem actions. The current userland exploit remains confined within a limited sandbox and falls short of full kernel-level hardware control.

Demonstrations of the hack include modded characters running in Mario Kart World. Nintendo has already delisted SmileBasic 4 from the Switch eShop worldwide to curb the exploit's spread. While the hack successfully targets firmware version 23.0.1, analysts note that upcoming firmware updates are expected to patch the vulnerability.

WHAT WIREUNWIRED ADDS
Plain-language context

WireUnWired turns the supplied report into a clearer brief, preserves the original publisher and author details, and adds relevant context without hiding where the information came from.

Useful next steps

Relevant WireUnWired coverage is connected so one story can lead into the larger technology context.

A WireUnwired summary is already available. You can still write your own brief below for the reader community.
SOURCE & ATTRIBUTION
Ars Technica

Original author: Kyle Orland

Original publication: 23 October 2026 03:55

Read full story on Ars Technica ↗
RELATED STORIES
Ars TechnicaOpenBSD 8.0 arrives with security record still intactEditorial illustration for Anthropic gives outside AI watchdog “employee-like” accessArs TechnicaAnthropic gives outside AI watchdog “employee-like” accessArs TechnicaFridge hack costing millions and sparking fires stemmed from poor security
Original sourceArs Technica ↗