Overview
- A public demonstration published Thursday showed researcher Sammy Hajhamid, known as pepsipu, running homebrew and modded Mario Kart World on a Switch 2 using a newly released jailbreak.
- The chain exploited a Switch 1 title, SmileBASIC 4, and combined a 32-bit integer overflow in the app with a buffer overflow in the console’s filesystem module to gain arbitrary read/write and native code execution.
- OpenAI’s Codex helped accelerate the discovery and development of the exploit, which provides userland privileges but does not give permanent kernel-level control.
- SmileBASIC 4 was delisted from the Nintendo eShop in the US and Europe within hours of the disclosure, limiting immediate replication while Nintendo and the community assess patches and further mitigations.
- The breach underscores a rising trend of AI-assisted reverse engineering and raises trade-offs for users and creators because it enables homebrew and save backups but also increases the risk of game mods and piracy and could prompt rapid platform countermeasures.