TL;DR
A report published on pepsipu.com describes ns2jb, a software-only, tethered jailbreak that its author says works on Switch 2 firmware 23.0.1. The author says it enables homebrew and game modifications, but the supplied report does not include independent verification or full details of the privilege-escalation steps.
A researcher writing on pepsipu.com says they developed ns2jb, a software-only, tethered jailbreak for the Nintendo Switch 2 that works on firmware 23.0.1. The author says it permits native code to run in system modules, potentially enabling homebrew, game modification and save-file backups; those capabilities have not been independently verified in the supplied material.
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
The author describes ns2jb as able to run arbitrary native code as an ordinary sysmodule and as the built-in fs sysmodule. The report says this access can support homebrew software, reverse engineering, game modding, save backups and use of many console peripherals. Because the jailbreak is tethered, the report does not describe it as a persistent modification that remains active without repeating a process after a restart.
The write-up recounts two exploit paths. An initial attempt used a WebKit vulnerability reached through a custom Wi-Fi captive portal, but the author says that route did not provide the arbitrary interprocess calls needed for broader system access. The report then describes targeting SmileBASIC, a Switch game, with a 32-bit integer overflow in its array-removal function. According to the author, that flaw enabled out-of-bounds memory access and eventually return-oriented programming on a Switch 1 used during development.
The author says the work took about two weeks and distinguishes it from a demonstration mod of Mario Kart World, which they say was made in a day for fun. The report attributes the mod to Codex-assisted work, but clarifies that a joking caption about asking an AI agent to jailbreak the console was not the actual method. The supplied material ends while describing the effort to obtain access to more privileged sysmodules, leaving the final escalation steps and their technical evidence incomplete here.
What the Report Could Mean for Switch 2
If the reported access works as described, it would give researchers and users a route to run unsigned native code on Nintendo’s newest console. Homebrew and reverse-engineering access can support independent software, preservation and security research, while game modifications and save backups may affect how players use and manage their data.
The claimed support for firmware 23.0.1 is particularly relevant because console security can change with software updates. The report does not establish how broadly the method works, whether Nintendo has addressed the underlying flaws, or whether use could carry practical risks such as account or warranty consequences. Readers should treat the account as a technical claim, not as independently confirmed compatibility guidance.
Products Worth Considering
Apple Watch Series 12 GPS 42mm
Bose QuietComfort Wireless Noise-Cancelling Over-Ear Headphones, Cypress Green
Apple MacBook Air 15-inch Laptop with M5 Chip, 16GB Memory, 512GB SSD, Midnight
As an affiliate, we earn on qualifying purchases.
How the Exploit Path Developed
The author says they first pursued browser-based code execution, describing WebKit as an accessible target but saying platform protections complicated escalation. In particular, the report cites execute-only memory, pointer authentication and control-flow integrity as obstacles to turning browser access into reliable system-module execution.
The alternative used SmileBASIC on Switch 1, which the author says provided a route to memory corruption without the same protections. The reported integer overflow involved arithmetic wrapping while the game removed elements from an array, allowing a memory copy to reach data outside the intended array. The author says that flaw led to read-and-write access and then ROP. This is the account’s stated route; the supplied source does not provide independent validation of the complete chain on Switch 2.
“ns2jb is a software-only, tethered jailbreak for the Switch 2.”
— The ns2jb report author
Verification and Compatibility Still Open
The supplied source is a first-person technical report, and it does not include an independent assessment confirming firmware 23.0.1 compatibility or the stated sysmodule privileges. It is also unclear whether the exploit works on other firmware versions, hardware revisions or consoles configured differently, and whether Nintendo has patched any part of the chain.
The account excerpt does not fully explain how the researcher moved from the reported Switch 1 game exploit to privileged execution on Switch 2. It also does not establish whether the repository contains everything needed to reproduce the result, what steps are required after a restart, or what protections could limit the described uses. The author’s “first” characterization is explicitly qualified and should not be treated as independently confirmed.
Further Technical and Platform Details
Readers will need the project repository and further technical documentation to evaluate reproducibility, supported configurations and the complete privilege-escalation chain. Independent testing would help establish whether the reported features work as described and whether the method remains effective on the stated firmware.
Nintendo has not provided a response in the supplied material, and no patch announcement or company assessment is included. Any changes in firmware support, security guidance or the repository’s contents may alter the status of the claim; for now, the report is the available account, with verification and the company’s position unresolved.
Key Questions
What is ns2jb?
ns2jb is the name the report gives to a software-only, tethered jailbreak that its author says runs on Switch 2 firmware 23.0.1.
What does tethered mean in this report?
The author labels the jailbreak tethered, meaning it is not presented as a permanently active modification after a restart. The supplied material does not spell out the exact restart procedure.
What capabilities does the author claim?
The report claims the method can run native code in system modules, supporting homebrew, game modding, reverse engineering and save backups. These claims have not been independently verified in the supplied source.
Has Nintendo confirmed or responded to the jailbreak?
No Nintendo response or confirmation appears in the supplied report. It is also unclear whether the company has patched the vulnerabilities described.
Does the report prove this is the first Switch 2 jailbreak?
No. The author says it is the first such exploit to their knowledge, which is a qualified claim and is not independently established by the material provided.
Source: hn
