{"slug": "nintendo-switch-2-gets-its-first-software-only-jailbreak-with-help-from-openai", "title": "Nintendo Switch 2 Gets Its First Software-Only Jailbreak, With Help From OpenAI Codex", "summary": "Security researcher Sammy Hajhamid, who goes by pepsipu online, released ns2jb, a software-only jailbreak for the Nintendo Switch 2 that runs on the latest 23.0.1 firmware, using OpenAI's Codex to do much of the work. The exploit chain starts with a 32-bit integer overflow in SmileBASIC 4, a roughly $25 Switch 1 programming app that still runs on the Switch 2, then moves to a buffer overflow in the console's filesystem service, letting users run native code with the permissions of ordinary system modules. The jailbreak is tethered and must be rerun after every reboot, has no kernel exploit or custom firmware yet, and fellow researcher Gezine called the work \"seems legit\" while Nintendo has not commented.", "body_md": "Sammy Hajhamid, a security researcher who goes by pepsipu online, has released [ns2jb](https://gitlab.com/pepsipu/ns2jb), a software-only jailbreak for the Nintendo Switch 2 that runs on the latest 23.0.1 firmware. To [show it off](https://x.com/pepsipu/status/2113117920373137622), Hajhamid modded Mario Kart World, a Switch 2 exclusive, and also dropped Peter Griffin, Hatsune Miku, Cinnamoroll, and Red from Angry Birds into the roster. It looks like OpenAI's Codex did a good chunk of the heavy lifting here. Hajhamid hooked a Switch 1 and a Switch 2 up to two JetKVMs, plus a Bluetooth light switch flicker that presses the power button whenever the console crashes, so the AI agents could keep at it on their own. An early attempt through the Switch 2's WebKit browser didn't pan out. The working chain instead starts with a 32-bit integer overflow in SmileBASIC 4, a roughly $25 Switch 1 programming app that still runs on the Switch 2, and then moves to a buffer overflow in the console's filesystem service.\n\nThe end result lets users run native code with the permissions of ordinary system modules, which opens the door to homebrew, game mods, save backups, and reverse engineering. However, the jailbreak is tethered, so it has to be run again after every reboot, and there's no kernel exploit or custom firmware yet. Fellow researcher [Gezine](https://x.com/gezine_dev/status/2113173031296381440), who disclosed a separate Switch 1 and Switch 2 userland exploit in July, said the work \"seems legit.\" Nintendo hasn't commented so far, though given how aggressively it has [gone after Switch piracy](https://www.techpowerup.com/353126/court-orders-reddit-moderator-to-pay-nintendo-usd-4-5-million-over-switch-piracy) and [emulators](https://www.techpowerup.com/319739/nintendo-of-america-sues-yuzu-switch-emulator-development-company), a firmware patch seems likely, and SmileBASIC 4 might even vanish from the eShop.", "url": "https://wpnews.pro/news/nintendo-switch-2-gets-its-first-software-only-jailbreak-with-help-from-openai", "canonical_source": "https://www.techpowerup.com/354036/nintendo-switch-2-gets-its-first-software-only-jailbreak-with-help-from-openai-codex", "published_at": "2026-10-22 17:53:42+00:00", "updated_at": "2026-10-22 20:40:30.343515+00:00", "lang": "en", "topics": ["artificial-intelligence", "ai-agents"], "entities": ["Nintendo", "Nintendo Switch 2", "Sammy Hajhamid", "OpenAI Codex", "SmileBASIC 4", "Gezine", "Mario Kart World", "JetKVM"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/nintendo-switch-2-gets-its-first-software-only-jailbreak-with-help-from-openai", "markdown": "https://wpnews.pro/news/nintendo-switch-2-gets-its-first-software-only-jailbreak-with-help-from-openai.md", "text": "https://wpnews.pro/news/nintendo-switch-2-gets-its-first-software-only-jailbreak-with-help-from-openai.txt", "jsonld": "https://wpnews.pro/news/nintendo-switch-2-gets-its-first-software-only-jailbreak-with-help-from-openai.jsonld"}}