任天堂 Switch 2 发售后一年首次被破解

The Nintendo Switch 2 has been jailbroken for the first time, with security researcher Sammy “pepsipu” Hajhamid announcing the exploit in a post on X overnight.

The exploit, called ns2jb, is a software-only jailbreak that Hajhamid built with the help of OpenAI Codex, the company’s coding model. To prove it works, pepsipu modded characters including Cinnamoroll, Peter Griffin and Hatsune Miku into Mario Kart World, a Switch 2 exclusive.

What it does, and what it doesn’t

In the announcement, Hajhamid described ns2jb as a tethered jailbreak: it does not survive a restart, so it has to be run again every time the console powers off. “This lets us run homebrew, reverse engineer and mod Switch 2 games, back up save files off the Switch, and access most of the Switch 2’s peripherals through MMIO,” Hajhamid wrote.

It stops well short of a full jailbreak. Custom firmware and piracy are not possible with ns2jb, and the exploit depends on a single app: SmileBASIC 4, a programming app for the original Switch that costs US$25 on the eShop and must be at version 4.4.9. Nintendo has not commented.

For anyone in Australia tempted to try it, the details so far are overseas-only: the US$25 price is what the US eShop charges, and there is no Australian pricing or availability note attached to the exploit’s requirements. The free trial version of SmileBASIC 4 is Japanese-only and reportedly does not work with the exploit anyway.

Why an AI model found it in a year

Hajhamid, a Caltech undergraduate, wrote on a personal blog post that Codex found a counting mistake and a buffer overflow in SmileBASIC’s file path handling, granting read and write access to memory. A custom harness gave the model controller inputs and video output, with a Bluetooth light switch rigged to press the power button if the console crashed mid-run.

The speed is the part that matters. The original Switch’s defences were eventually broken, but the PS4, PS5 and Xbox Series have never had their root of trust compromised, and this exploit lands as PS5 jailbreak activity has picked up. Console makers have traditionally outlasted manual auditing, and a model that compresses that work into days changes the calculation.

Nintendo is widely expected to pull SmileBASIC 4 from the eShop within days, which would close the window as quickly as it opened.

The post Nintendo Switch 2 jailbroken for the first time, just a year after launch appeared first on WellPlayed.