A Nintendo Switch 2 jailbreak, developed with help from OpenAI’s Codex, shows how to run unauthorized software on Nintendo’s latest console. Security researcher Sammy Hajhamid, known online as pepsipu, developed the software-only exploit called ns2jb. It works on firmware version 23.0.1 without requiring a hardware modification.
The breakthrough allows homebrew software, game modifications, and access to certain system functions. Hajhamid demonstrated its capabilities by adding unofficial characters to Mario Kart World. However, the exploit is temporary, technically demanding, and does not provide unrestricted control over the console.
How the Nintendo Switch 2 Jailbreak Works
The exploit relies on SmileBASIC 4, a programming application originally released for the first Nintendo Switch. The software lets users create programs in the BASIC programming language. Its compatibility with Switch 2 provided an unexpected entry point for security research.
In his technical explanation, Hajhamid describes how Codex identified an integer overflow vulnerability inside the SmileBASIC interpreter. The flaw allowed researchers to manipulate memory beyond the application’s intended boundaries.
Further research uncovered a vulnerability affecting the console’s filesystem service. Combining the weaknesses enabled native code execution with certain system-module permissions.
Hajhamid says the resulting exploit can run homebrew applications, support game reverse engineering, and access save data. It can also interact with several hardware components through memory-mapped interfaces.
The publicly released ns2jb project remains a proof of concept rather than a complete custom firmware solution. It does not provide kernel access or a permanent system modification.
OpenAI Codex Helped Find the Vulnerabilities
Artificial intelligence played an important role in the research. Hajhamid used OpenAI Codex to examine software, investigate vulnerabilities, and help develop parts of the exploit.
He also built a testing setup that allowed Codex to interact with physical consoles. The system used remote hardware interfaces for controller inputs and video capture. A Bluetooth-controlled device could restart a console after crashes.
One early approach targeted the Switch 2’s WebKit browser engine. Although Codex found a possible route to limited code execution, it couldn’t extend that approach to the system functions needed.
The successful method instead involved SmileBASIC and the filesystem service. Hajhamid emphasized that the jailbreak required approximately two weeks of substantial effort.
He also clarified that a widely shared instruction supposedly telling Codex to jailbreak the console independently was a joke. The project was not completed autonomously by an AI assistant.
The case illustrates how AI tools can support complex security research without replacing human expertise. TechAmerica.ai recently examined a similar development involving AI-assisted vulnerability research into critical PHP security flaws.
Mario Kart World Mods Demonstrate the Breakthrough
To demonstrate the jailbreak, Hajhamid modified Mario Kart World, a Nintendo Switch 2 exclusive. The resulting footage features characters not on Nintendo’s official racing roster.
The additions include Sanrio’s Cinnamoroll, Peter Griffin from Family Guy, and Hatsune Miku. Other characters appear in the demonstration, replacing existing racers with custom models.
Hajhamid says Codex generated the Mario Kart World modification in approximately one day. He described that work as a demonstration rather than the main objective of the research.
The modifications show that the exploit can alter game content under certain conditions. They do not establish that every Switch 2 game can be modified easily or reliably.
SmileBASIC 4 Disappears From Nintendo’s eShop
The exploit’s public release quickly drew attention to SmileBASIC 4. The programming application reportedly disappeared from Nintendo’s digital storefront in several regions.
According to Nintendo Life, SmileBASIC 4 became unavailable through the eShop after the jailbreak was disclosed. Nintendo has not publicly confirmed why it removed the title.
The availability issue creates an additional obstacle for anyone attempting to reproduce the research. The demonstrated method depends on a compatible version of SmileBASIC already being accessible.
Another limitation is that ns2jb is tethered. It requires an external computer and must be activated again after the console restarts. The exploit does not survive a reboot or install persistent custom firmware.
This makes it substantially less convenient than a permanent jailbreak. It also means the current method is primarily useful to technically experienced researchers and homebrew developers.
What the Exploit Means for Switch 2 Security
The discovery marks a notable step in efforts to understand Nintendo Switch 2 security. It shows researchers can access protected system functions without installing additional hardware.
However, the exploit does not fully unlock the console. Access remains restricted, and developing more comprehensive homebrew capabilities would require substantial technical work.
Nintendo could also address the underlying vulnerabilities through software updates. The company has not announced a specific security patch responding to ns2jb.
For the homebrew community, the research offers a foundation for further experimentation. It could support new applications, game modifications, and technical investigations into the console’s architecture.
The Nintendo Switch 2 jailbreak also highlights AI’s growing role in software security research. Codex helped identify and investigate vulnerabilities, but experienced human guidance remained essential.
For now, ns2jb is an important technical demonstration, not a consumer-ready unlocking tool. Its lasting significance will depend on further research and whether Nintendo closes the vulnerabilities before broader homebrew support develops. Words Characters Reading time
