New Switch 2 Userland Exploit Bypasses Restrictions

A new security vulnerability has been discovered for the Nintendo Switch 2. The developer known as "Gezine" has created a userland exploit that is not based on webkit or save exploits. This differs from previously known exploits which required a save transfer via Nintendo's online service, which in turn required the latest firmware version to function. The new vulnerability, reported by the developer themselves, works without these restrictions and is compatible with all firmware versions.

The reason for choosing not to attack webkit directly is stated to be the implementation of Arm PAC (Pointer Authentication Code) in the Switch 2's webkit, which prevents ROP (Return-Oriented Programming) code execution. Gezine suggests there was an easier way to exploit the system.

This new exploit could potentially open doors for various types of modifications and homebrew software on the console, regardless of the user's firmware version.