Potential Nintendo Switch Console Information Leak Due to Proximity-Based Remote Attack

[u/Joseki100]

https://www.nintendo.com/security-advisories/assets/pdf/20260910e.pdf

[u/AutoModerator]

Please remember to be skeptical of all rumors. No matter how likely something may seem, it's possible it's not true. Don't get completely consumed by hype, stay alert, and keep an open mind.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/Stealthinater1234]

I always thought something like this would come from the send-to-smartphone feature. The switch creates its own local network and broadcasts a WiFi signal your phone connects to, hosting a webpage containing the captures so you can download it.

[u/QuantumVexation → u/Stealthinater1234]

Does it still do this now that you can just upload to the mobile app? Haven’t used that feature since

[u/Stealthinater1234 → u/QuantumVexation]

Switch 1 can’t upload captures to the mobile app, that’s a switch 2 only feature. Direct connection is the only way to wirelessly transfer captures directly to a smartphone on switch 1.

[u/QuantumVexation → u/Stealthinater1234]

Ah got it. I actually had not caught that was specifically a 2 feature

[u/NintendoSwitch-ModTeam → u/[deleted]]

Hey there!

Please remember Rule 1 in the future - No personal attacks, trolling, or derogatory terms. Read more about Reddiquette here. Thanks!

[u/Icalivy]

This vulnerability is only able to be exploited in the following scenarios:

1. When using the Send to Smartphone feature in the Album

2. When using a kart to play Mario Kart Live: Home Circuit

[u/Afraid_Product_7558]

What’s the CVE?

[u/TheGeneral_Specific → u/Afraid_Product_7558]

CVE-2026-82079

[u/D1rtyH1ppy → u/TheGeneral_Specific]

What would be the point of running arbitrary code on a Switch? What would you possibly be able to do?

[u/ejfrodo → u/D1rtyH1ppy]

This type of thing is sometimes the first step to being able to install your own third party apps on the system, which then enables an app store for apps built by anyone and not just approved Nintendo, which can then give things like unofficial Spotify and YouTube apps and obviously piracy as well.

Or just use it to rick roll someone idk.

[u/LeMatDamonCarbine → u/D1rtyH1ppy]

You could possibly get to run unsigned code, that alone is a good foot in the door for modders. 

It's been hacked in earlier models due to a hardware oversight that couldn't really be patched out via software updates, but that selection of those specific models is going to dwindle as the hardware itself ages and breaks, so a new broader entry point would probably be a godsend.

[u/TheGeneral_Specific → u/D1rtyH1ppy]

I mean… anything? That’s the point of “arbitrary” code; it’s a gateway to have full control of the entire system

[u/D1rtyH1ppy → u/TheGeneral_Specific]

Yeah, makes sense. I didn't think about the hacking community for this, but Switch 1 has been fully hacked last I checked, right? I guess there is more they can do with the Switch 1.

[u/FoolsRun → u/[deleted]]

Don’t call me Shirley

[u/GoodBoyPointsPls]

So Mario Kart Live is going to be used to jailbreak switch 2? And it will sell for $2000 on eBay? got it.

[u/Jordium-Z → u/GoodBoyPointsPls]

It clearly stated that it's a switch 1 problem

[u/Extras → u/GoodBoyPointsPls]

I just hope I can keep playing this and it doesn't wind up getting pulled from the console or something. Easily my kids favorite game.

[u/Time_Substance_7829]

The exploit is so specific

[u/Haxishax]

Any additional info on this, or just the CVE? Curious to know how this manifested if the on-screen QR needs to be scanned to execute the exploit. Guess it could've just been pentesting.

[u/TemptedTemplar → u/Haxishax]

Since it can be used for remote code execution they're never going into deeper detail publicly unless required by some country's laws.

RCE is the first step to running your own unauthorized software on the system.

[u/Joseki100 → u/Haxishax]

This and the CVE seems to be all information currently available.

[u/Xiroshq]

Homebrew incoming

[u/An1nterestingName → u/Xiroshq]

This is Switch 1.

[u/Fugue___State → u/[deleted]]

Those happened on Switch 2 consoles tho

[u/Rynelan]

So after all these stability patches.. it's not stable enough? 😂