Switch 2: new userland exploit works entirely offline

Developer known under the handle Gezine, already recognized in the PlayStation 4 and PlayStation 5 hacking scene, announced on X on July 19, 2026 that they had built a new userland exploit working on both the original Nintendo Switch and the Switch 2. Unlike the entry points already known on the new console, this technique relies neither on the built-in WebKit browser nor on a save file transfer through the Nintendo Switch Online service, making it usable entirely offline and across every firmware version.

This approach deliberately avoids WebKit, locked down on Switch 2 by Arm PAC (Pointer Authentication Code) technology that blocks code execution through the classic ROP (Return-Oriented Programming) method. By relying on a different userland entry point, Gezine sidesteps this protection without needing to break the browser's sandbox.

A userland exploit only grants access to a single application's sandbox, far from a full jailbreak capable of running unsigned code across the whole system, but it represents a valuable foothold for the homebrew scene, which is only just starting to seriously look into the new console.

As of today, no jailbreak, custom firmware, or working modchip exists for the Switch 2: any listing claiming otherwise should be treated as a scam. This new exploit could nonetheless pave the way, over time, for save-backup tools or retro emulators running natively on the console, without depending on a system update or an internet connection.

Source: WCCFtech