What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
Yes—but only in a limited, experimental sense. Security researcher Sammy Hajhamid (known as pepsipu) demonstrated a software-only exploit chain called ns2jb on Nintendo Switch 2 system software 23.0.1. It reaches native code execution with the privileges of the console’s filesystem system module and has been used to modify Mario Kart World. The jailbreak is tethered: restarting the console removes the payload. It does not provide kernel access, install persistent custom firmware, or turn the Switch 2 into a turnkey homebrew or piracy machine.
The demonstration is nevertheless significant because it establishes a practical foothold for homebrew research, game modification, save-file work and reverse engineering on Nintendo’s new hardware.
| # | Preview | Product | Price | |
|---|---|---|---|---|
| 1 |
|
Nintendo Switch 2 System | $499.00 | Buy on Amazon |
| 2 |
|
Nintendo Switch 2 System with Super Mario Galaxy + Super Mario Galaxy 2 Bundle | $568.00 | Buy on Amazon |
| 3 |
|
Nintendo Switch 2 + Mario Kart World Bundle with Bonus HDMI Cable & Screen Cleaning Cloth | $618.98 | Buy on Amazon |
As an Amazon Associate I earn from qualifying purchases.
Free tools Windows power users keep installed
One-click scans. No signup required.
What has the Switch 2 jailbreak actually demonstrated?
ns2jb has moved beyond a theoretical bug. Public demonstrations show native code running with the permissions of the fs filesystem system module, along with unofficial character models appearing in Mario Kart World. The examples reported by Ars Technica included Cinnamoroll, Peter Griffin and Hatsune Miku.
GBAtemp’s technical summary also attributes internal-storage and ordinary system-module-code dumping to the researcher’s work. Hajhamid said the chain can run homebrew, support reverse engineering and game modding, back up save files away from the console, and reach many Switch 2 peripherals through memory-mapped I/O. Those are researcher-stated capabilities, not a promise that every homebrew application already works.
Popular on Amazon
- The next evolution of Nintendo Switch
- One system, three play modes: TV, Tabletop, and Handheld
- Larger, vivid, 7.9” LCD touch screen with support for HDR and up to 120 fps
- Dock that supports 4K when connected to a compatible TV*
- GameChat** lets you voice chat, share your game screen, and connect via video chat as you play
What has not been shown
- The public chain does not survive a reboot.
- It stops below the kernel, so it is not full hardware control.
- There is no persistent custom-firmware installation.
- GBAtemp reported no title installer, and its explainer said a complete commercial-game dump had not been publicly demonstrated at that point.
Kotaku’s October 26 follow-up described newer community claims involving below-KIP binaries and full dumps. Those claims remain an emerging development, not a settled, independently verified feature. A system-file or asset demonstration should not be treated as proof of a general commercial-game dumping workflow.
How does ns2jb work?
The chain combines bugs in the Switch 1 programming title SmileBASIC 4 with a vulnerability in Switch 2 filesystem services. The public descriptions explain the mechanism at a high level; they do not amount to a beginner-safe exploit tutorial.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →SmileBASIC memory corruption
Ars Technica reported a 32-bit integer overflow in SmileBASIC’s array-item removal routine. The error can expose an array pointer, allowing controlled memory reads and writes from the programming environment.
Filesystem-service overflow
Hajhamid then found a buffer overflow in the Switch 2 filesystem-services module. That bug exposes a cached data pointer and provides another arbitrary read/write primitive.
Loader trust flaw and native execution
GBAtemp describes the final links as a heap overflow in the filesystem service followed by a loader trust flaw. Together, they let attacker-controlled code launch as a process with fs-system-module privileges. Because the chain remains below the kernel, its reach is powerful but narrower than a complete console compromise.
What software and hardware are required?
The public ns2jb repository lists a tightly defined setup. Compatibility work is still continuing, so these requirements should be read as the documented target configuration rather than a guarantee for every console.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errors| Requirement | Documented target | Qualification |
|---|---|---|
| SmileBASIC | Version 4.4.9 | The entry-point title was removed from some or all eShops after disclosure; regional availability can change. |
| Switch 2 firmware | System software 23.0.1 | The public chain targets this version; a later update may close the vulnerability. |
| Computer | macOS or Linux | Windows is not listed in the repository’s requirements. |
| Runtime | Node.js 22 or later | Use the version specified by the current project documentation. |
| Network | Console and computer on the same reachable network | The setup communicates over the local network. |
| Save space | More than 20 MiB free in the SmileBASIC save | This is a storage requirement for the documented setup. |
| Input accessory | USB keyboard helpful | The repository presents it as useful for setup, not universally mandatory. |
SmileBASIC 4 was reported removed from regional or worldwide eShops on October 22–23, 2026. Ars Technica said a Japanese demo might still have been accessible when it published; that detail is volatile, and availability should be checked for the relevant account region rather than assumed.
Also popular on Amazon
- The next evolution of the Nintendo Switch system
- One system, three play modes: TV, Tabletop, and Handheld
- Larger, vivid, 7.9” LCD touch screen with support for HDR and up to 120 fps
- Supports up to 4K resolution** when using a compatible game and TV connected via the included Nintendo Switch 2 dock
- Nintendo Switch 2 plays compatible physical and digital Nintendo Switch games.***
Is this a permanent jailbreak or custom firmware?
No. ns2jb is a tethered software jailbreak: rebooting clears the payload, so the entry process must be repeated. It should therefore be compared with a research foothold, not with a mature custom-firmware platform.
| Capability | ns2jb status | What that means in practice |
|---|---|---|
| Survives reboot | No | Every restart returns the console to its normal software state. |
| Privilege level | Filesystem system-module access; no public kernel compromise | Useful for research and selected modifications, but not unrestricted control. |
| Custom firmware | Not provided | There is no persistent CFW installation in the public chain. |
| Homebrew | Demonstrated in principle | Native execution is real, but application compatibility and tooling remain immature. |
| Game modification | Demonstrated | Mario Kart World character changes are the clearest public example. |
| Title installation and piracy workflow | Not established by the public demonstrations | Do not equate the exploit with an installer or verified full-game dumping process. |
Can it install dumped games or enable ordinary piracy?
Nothing in the established demonstrations supports describing ns2jb as a ready-made piracy solution. GBAtemp specifically noted the absence of a title installer and said complete game dumping had not been publicly shown in its account. Later claims about broader filesystem access need to be separated from verified, end-to-end dumping and installation.
That distinction matters technically: filesystem-module execution can expose valuable storage and system data without automatically supplying the keys, tooling, persistence or user-friendly interfaces needed for a general backup-and-install workflow.
Why does the SmileBASIC delisting matter?
SmileBASIC 4 is the public entry point, so removing it from eShops can make the exploit practically inaccessible to owners who did not already obtain it. Reports differed by region, and the Japanese availability note was only a snapshot from October 22, 2026. A future firmware update could also invalidate the chain even for users who retain the title.
Do not update a console solely on the assumption that the exploit will remain available, and do not assume that owning SmileBASIC guarantees compatibility: the documented target is specifically version 4.4.9 on system software 23.0.1.
What does Nintendo’s license say about using the exploit?
Nintendo of America’s Switch 2 End User License Agreement, effective October 2026, prohibits copying, reverse engineering and “bypass[ing], modify[ing], decrypt[ing], defeat[ing], tamper[ing] with, or otherwise circumvent[ing] any of the functions or protections of the Console or the Software.”
The same agreement says Nintendo may render the console or software “permanently unusable in whole or in part” if those restrictions are violated. This is a contractual warning, not evidence that Nintendo has already banned or bricked ns2jb users. The sources available for this report do not show a public Nintendo statement specifically confirming enforcement against the exploit.
Also popular on Amazon
- 【Ultimate Nintendo Switch 2 Bundle – Ready to Play】Includes the complete Nintendo Switch 2 console and a full-game download of Mario Kart World, so you can start racing right out of the box. Perfect for gamers of all ages and playstyles.
- 【Next-Gen Hybrid Gaming with Stunning Visuals】Experience a vivid 7.9‑inch 1080p LCD touchscreen with HDR support, and enjoy 4K TV output at up to 60 fps when docked — for immersive gameplay at home or on the go.
- 【Versatile 3 Play Modes】Seamlessly switch between Handheld, Tabletop, and TV modes — all featuring intuitive controls and smooth performance, wherever you choose to play.
- 【Enhanced Social Gaming with GameChat & Multiplayer】Connect with friends locally, enjoy online multiplayer with up to 24 players, and use voice chat via GameChat (internet connection and Nintendo Switch Online membership required after trial period).
- 【Powerful Storage & Joy‑Con 2 Controllers】Includes 256 GB internal storage (expandable with microSD), magnetic Joy‑Con 2 controllers, docking station, HDMI cable, AC adapter, grip, and straps — everything you need for the ultimate gaming setup.
How much did AI contribute to the discovery?
Ars Technica reported that Hajhamid spent approximately two weeks on the project using a custom hardware harness and OpenAI Codex while directing the investigation. GBAtemp said Codex helped write heap-grooming logic, while Hajhamid supplied the hardware rig, debugging decisions and research direction.
The evidence supports describing ns2jb as AI-assisted vulnerability research. It does not support saying an AI independently jailbroke the Switch 2.
What should Switch 2 owners expect next?
- Compatibility is likely to remain version-specific while the community tests the chain and Nintendo changes system software.
- SmileBASIC’s regional delisting may become the largest practical barrier for new users.
- Claims of below-KIP access or full dumps should be treated as provisional until reproducible demonstrations and tooling appear.
- A stable, persistent homebrew ecosystem would require improvements that the current chain does not provide: reboot persistence, broader privilege and documented application support.
Frequently Asked Questions
Does ns2jb work on every Switch 2 console?
No public compatibility matrix covers every hardware revision, region or software combination. The documented target is system software 23.0.1 with SmileBASIC 4.4.9, so consoles on other versions should be considered unconfirmed rather than presumed compatible.
Can a factory reset remove the jailbreak?
A reboot already removes the active payload because the exploit is tethered. A factory reset would also erase user data and saves, but there is no reason to perform one as a jailbreak-removal method; simply restarting returns the running system to its normal state.
Is modifying Mario Kart World an online-ban risk?
The available reports establish the technical demonstration, not Nintendo’s enforcement policy for that specific modification. Using altered software in networked services can create account or service risks beyond the local research setup, so users should not interpret the demonstration as approval for online play.
Why is the firmware number so important?
Memory layouts, vulnerable code and Nintendo’s mitigations can change between system releases. An exploit that works on 23.0.1 may fail silently or be patched on a later version, which is why the project’s version requirement is narrower than simply saying “Switch 2.”
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
