Mushitags

The Nintendo Switch 2 homebrew scene reached its first major public milestone in late 2026 with **`ns2jb`**, a software-only, tethered userland jailbreak released by security researcher **pepsipu (Sammy Hajhamid)**—followed swiftly by Nintendo's counter-move in **Firmware 23.5.0** across both Switch 2 and the original Nintendo Switch. For Switch and Switch 2 owners tracking the gap between early proof-of-concept exploits and full Custom Firmware (CFW), November's updates clarify both how Nintendo is hardening its newer hardware and how the legacy Switch 1 CFW stack is keeping pace. ### How `ns2jb` Works—and Why SmileBASIC 4 Was the Weak Link As documented on [GBAtemp](https://gbatemp.net/threads/ns2jb-first-public-tethered-userland-jailbreak-for-nintendo-switch-2.677614/) and covered by [NintendoLife](https://www.nintendolife.com/news/2026/11/switch-2-supposedly-jailbroken-via-software-only-exploit), `ns2jb` did not rely on a hardware modchip or voltage-fault injection attack like late-era Switch OLED workarounds. Instead, it exploited Nintendo Switch 2's backward-compatibility layer: specifically, an integer overflow inside the legacy Switch 1 programming application *SmileBASIC 4* running on Switch 2 hardware. By chaining that initial interpreter bug into a buffer overflow within the console's filesystem (`fs`) and relocatable object (`ro`) system modules, pepsipu achieved arbitrary native code execution inside userland. Notably, the research also marked a methodological shift for console reverse engineering: pepsipu leveraged AI-assisted fuzzing and coding agents inside a controlled test rig to isolate crash paths and stabilize components of the exploit chain far faster than manual trial-and-error alone. ### Tethered Userland vs. Atmosphere: What `ns2jb` Can and Cannot Do Crucially, `ns2jb` is **not** Custom Firmware (CFW) comparable to Atmosphere on the original 2017 Nintendo Switch. Understanding that distinction prevents the most common misconceptions circulating on social media: - **Tethered Execution:** `ns2jb` grants arbitrary native code execution strictly at standard system-module userland permissions. There is no persistent bootrom or kernel hook, meaning the entire exploit sequence must be re-run manually after every console reboot. - **Practical Capabilities:** Within those userland boundaries, researchers and modders demonstrated save-file dumping, partial filesystem exploration, and userland game modifications—most visibly custom character skins in launch-window titles such as *Mario Kart World*. - **Hard Security Boundaries:** Without a separate kernel or TrustZone/hypervisor break, `ns2jb` cannot load unsigned game backups, install persistent background sysmodules, or bypass Nintendo's online entitlement checks—a reality examined in detail in our [Switch 2 Piracy and Emulation Myths breakdown](https://www.mushimu.com/post/9270). ### Nintendo's Firmware 23.5.0 Patch, eShop Gifting, and Atmosphère v1.12.2 In November 2026, Nintendo rolled out **System Update 23.5.0** for both Switch and Switch 2. According to [NintendoLife](https://www.nintendolife.com/news/2026/11/nintendo-switch-2-system-update-23-5-0-is-now-live-here-are-the-full-patch-notes) and [Nintenderos](https://www.nintenderos.com/nintendo-switch-2/nintendo-switch-y-nintendo-switch-2-reciben-la-actualizacion-23-5-0-preparandose-para-su-nueva-funcion-de-regalos-y-mas/), the update adds back-end support for **Nintendo eShop family-group gifting** (launching November 17, 2026), Switch 2 initial-setup accessibility options, and Portuguese (Portugal) Text-to-Speech and Game Chat Voice-to-Text. Under the hood, however, **Firmware 23.5.0** explicitly patches filesystem (`fs`) and interpreter exploit vectors—locking out `ns2jb` on updated Switch 2 consoles alongside Nintendo's eShop restriction of *SmileBASIC 4*. Meanwhile, on the **original Nintendo Switch**, the [Atmosphère CFW project](https://github.com/Atmosphere-NX/Atmosphere) swiftly updated to **v1.12.2** (alongside Hekate v6.5.5, hbl 2.4.5, and hbmenu 3.6.1) to restore compatibility with 23.5.0. ### What Comes Next for Switch 2 Homebrew? With `ns2jb` neutralized on 23.5.0 and no public Atmosphere equivalent available for Switch 2 hardware, research focus has shifted back toward browser/WebKit surfaces and isolated system-service IPC boundaries. Community consensus on GBAtemp and `r/switch2hacks` remains unchanged: any Switch 2 still below **Firmware 23.5.0** should stay offline with automatic updates disabled, while original Switch CFW users should always verify Atmosphère and Hekate compatibility before updating. ### Sources & Further Reading - [NintendoLife — Nintendo Switch 2 System Update 23.5.0 Is Now Live: Full Patch Notes](https://www.nintendolife.com/news/2026/11/nintendo-switch-2-system-update-23-5-0-is-now-live-here-are-the-full-patch-notes) - [Nintenderos — Actualización 23.5.0 de Nintendo Switch y Switch 2](https://www.nintenderos.com/nintendo-switch-2/nintendo-switch-y-nintendo-switch-2-reciben-la-actualizacion-23-5-0-preparandose-para-su-nueva-funcion-de-regalos-y-mas/) - [Atmosphere-NX / Atmosphere (Official GitHub Repository)](https://github.com/Atmosphere-NX/Atmosphere) ~NintendoSwitch2 ~Switch2Hacks ~ns2jb ~Atmosphere ~Homebrew