cd /news/artificial-intelligence/nintendo-switch-2-gets-its-first-sof… · home › topics › artificial-intelligence › article
[ARTICLE · art-155603] src=techpowerup.com ↗ pub= topic=artificial-intelligence verified=true sentiment=· neutral

Nintendo Switch 2 Gets Its First Software-Only Jailbreak, With Help From OpenAI Codex

Security researcher Sammy Hajhamid, who goes by pepsipu online, released ns2jb, a software-only jailbreak for the Nintendo Switch 2 that runs on the latest 23.0.1 firmware, using OpenAI's Codex to do much of the work. The exploit chain starts with a 32-bit integer overflow in SmileBASIC 4, a roughly $25 Switch 1 programming app that still runs on the Switch 2, then moves to a buffer overflow in the console's filesystem service, letting users run native code with the permissions of ordinary system modules. The jailbreak is tethered and must be rerun after every reboot, has no kernel exploit or custom firmware yet, and fellow researcher Gezine called the work "seems legit" while Nintendo has not commented.

by read1 min views2 publishedOct 22, 2026

Sammy Hajhamid, a security researcher who goes by pepsipu online, has released ns2jb, a software-only jailbreak for the Nintendo Switch 2 that runs on the latest 23.0.1 firmware. To show it off, Hajhamid modded Mario Kart World, a Switch 2 exclusive, and also dropped Peter Griffin, Hatsune Miku, Cinnamoroll, and Red from Angry Birds into the roster. It looks like OpenAI's Codex did a good chunk of the heavy lifting here. Hajhamid hooked a Switch 1 and a Switch 2 up to two JetKVMs, plus a Bluetooth light switch flicker that presses the power button whenever the console crashes, so the AI agents could keep at it on their own. An early attempt through the Switch 2's WebKit browser didn't pan out. The working chain instead starts with a 32-bit integer overflow in SmileBASIC 4, a roughly $25 Switch 1 programming app that still runs on the Switch 2, and then moves to a buffer overflow in the console's filesystem service.

The end result lets users run native code with the permissions of ordinary system modules, which opens the door to homebrew, game mods, save backups, and reverse engineering. However, the jailbreak is tethered, so it has to be run again after every reboot, and there's no kernel exploit or custom firmware yet. Fellow researcher Gezine, who disclosed a separate Switch 1 and Switch 2 userland exploit in July, said the work "seems legit." Nintendo hasn't commented so far, though given how aggressively it has gone after Switch piracy and emulators, a firmware patch seems likely, and SmileBASIC 4 might even vanish from the eShop.

── more in #artificial-intelligence 4 stories · sorted by recency
── more on @nintendo 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
→ Live at https://your-agent.zahid.host ✓
Get free account → Pricing
from €0/mo · no card required
LIVE [news/nintendo-switch-2-ge…] indexed:0 read:1min 2026-10-22 · —