Switch 2’s ns2jb demo chains two memory bugs, but remains tethered

Researcher Sammy Hajhamid, who posts as pepsipu, described ns2jb on Oct. 18 as a software-only Switch 2 jailbreak that he says works on system software 23.0.1. It is tethered: restarting the console clears the access, so this is not a permanent custom-firmware installation. The researcher’s technical write-up describes a two-stage chain. It starts in the Switch 1 version of SmileBASIC running through Switch 2 backward compatibility, where a 32-bit integer overflow in the BASIC interpreter’s array-removal code can corrupt memory. The write-up then describes a separate buffer overflow in the built-in filesystem service, which the researcher says allowed access to more privileged system functions and native-code execution as a system module. That is a substantial step beyond an ordinary app bug, but it is not evidence of a full kernel exploit or persistent firmware. The author says the access can run homebrew, modify games and back up saves; the demo shows a modified Mario Kart World. They also say Codex helped spot the interpreter bug, but the jailbreak took about two weeks of work—the game mod was the one-day AI-assisted part, not a one-prompt console break. An Oct. 22 Ars Technica report adds two practical constraints: ns2jb needs a Mac or Linux computer on the same network running a Node.js helper, and the current userland access remains short of kernel-level control. Ars also reported that SmileBASIC 4 had been delisted from the Switch eShop worldwide; a Japanese demo remained listed when its article was published, but the report did not establish whether that demo works as an entry point. The researcher says 23.0.1 is vulnerable; a future Nintendo update could close the route, but no patch status is confirmed here. Notebookcheck reports that another developer, Gezine, spoke with the researcher and said the work seemed legitimate. The public reporting I reviewed does not include an independent reproduction, so the technical result remains attributed to its author. [The researcher’s technical account](https://pepsipu.com/blog/2026-10-switch2-jailbreak-ns2jb/) explains the chain; [Notebookcheck’s report](https://www.notebookcheck.net/The-Nintendo-Switch-2-has-reportedly-been-jailbroken-through-a-software-only-exploit.1431060.0.html) describes the independent check and its limits; [Ars Technica’s report](https://arstechnica.com/gaming/2026/10/switch-2-jailbreak-gives-hackers-new-ways-to-run-homebrew-and-mod-games/) adds the tethering and eShop context. ~gaming ~nintendoswitch2 ~homebrew