What was presented
According to a report by IT之家 on October 22, developer pepsipu presented a software modification solution for the Nintendo Switch 2 console called ns2jb. The author states that the method works on firmware 23.0.1, the most recent indicated, and that it does not require hardware modification.
The claimed result is execution of native code within system processes: from this base would derive the ability to launch homebrew programs, modify games, and make backup copies of saves. IT之家 specifies, however, that this is not a complete compromise of the system: kernel-level control is missing and it is not possible to boot custom firmware persistently.
How it works and what changes compared with the past
The exploit chain described starts from the Switch 2's compatibility with first-generation Switch games. The researcher exploited a 32-bit integer overflow in the array deletion operation of the SmileBASIC interpreter, obtaining read and write capabilities beyond the intended memory limits. From there, passing through components such as the fs file service process, he would have reached native code execution in system services.
The difference from a classic jailbreak is duration: as stated, ns2jb is not permanent and must be reactivated on every reboot, because the payload is erased from memory and the system file process returns to its original state. Execution requires SmileBASIC version 4.4.9, a computer on the same local network with Node.js 22 or higher, and about 20 MB free for saves.
In the published demonstration, the researcher modified the Switch 2 exclusive game 《马力欧卡丁车 世界》, inserting non-original characters such as Sanrio's Cinnamoroll and the red bird from Angry Birds. He also indicated that he used OpenAI Codex for vulnerability analysis and exploit development, with total work of about two weeks and the game modification completed in one day; for automated tests he set up a system with a first-generation Switch, a Switch 2, a remote control device, and an automatic button-pressing mechanism.
Limitations and open questions
The available information concerns the author's description and demonstration, not an independent verification of the method's stability or reproducibility. It therefore remains to be confirmed whether it actually applies to all consoles updated to the indicated firmware and how the system behaves in scenarios other than those shown.
The technically relevant point is that the chain exploits a mechanism designed to run titles from the previous generation: a compatibility bridge that thus becomes an additional attack surface. The practical scope remains limited, however, because without kernel control and without persistent booting of custom firmware, it does not constitute a fully unlocked system. For players and for platform maintenance, the issue is twofold: on the one hand, it opens up space for game modification and amateur development; on the other, the same features touch sensitive areas such as save backups and the integrity of system services.
