A modder claims to have created a new Nintendo Switch 1 and 2 userland exploit that removes the need for save exploits.
Enthusiast developer gezine_dev took to Twitter/X to reveal that they have created a new userland exploit compatible with both the original Nintendo Switch and the Nintendo Switch 2. According to then, the exploit eliminates the need to rely on save exploits or WebKit vulnerabilities as an entry point.
The developer explained that while userland exploits have technically existed since the Switch 2’s launch, they rely on specially crafted save files. Because those save exploits require save transfers through Nintendo Switch Online, users are effectively forced onto the latest firmware before they can use them. The modder said, “The difference is existing userland exploit is based on save exploit which can’t be used without save transfer using Nintendo Online Service.” They further noted that this requirement limits the usefulness of any future software-based privilege escalation or kernel exploit discovered on older firmware versions, as users would first need to update in order to transfer the required save file.
According to the developer, the new exploit removes the need for save exploits altogether, instead using a different entry point that works independently of Nintendo Switch Online save transfers.They also explained why they chose not to target the Switch 2’s WebKit browser implementation. They pointed to the console’s use of Pointer Authentication Codes (PAC), an Arm security feature designed to make common exploitation techniques such as Return-Oriented Programming (ROP) substantially more difficult.
Instead of attempting to bypass those protections, the developer said they pursued what they considered to be an easier avenue for obtaining userland access. They further clarified that while the exploit itself is intended to work regardless of firmware version, users on the Switch 2 console must first update to firmware 20.0.0 or later in order to enable the console’s Nintendo Switch compatibility mode. According to them, this can be accomplished offline by using any physical game cartridge containing firmware version 20.0.0 or newer, allowing users to avoid updating through Nintendo’s online services.
