Nintendo identifies Switch exploit in which bad actor could run code or obtain information stored on the console
Posted on September 10, 2026 by Brian(@NE_Brian)
in News, Switch
Nintendo published a new security notice today covering an exploit in which a third-party could potentially run code or obtain certain contents stored on Switch systems. This can happen due to a proximity-based remote attack.
The means by which an attack can be executed sounds fairly limited. According to Nintendo, a bad actor must directly scan the QR code displayed on the Switch console screen (or the TV screen) when using the Send to Smartphone feature in the Album or when using a kart to play Mario Kart Live: Home Circuit.
If the QR code is not scanned, you’ll be fine. If the code is scanned, it’s possible for someone to run unauthorized code on your Nintendo Switch console or obtain information stored on the system.
According to Nintendo, Switch units are impacted that are on firmware earlier than version 23.0.0. We also have confirmation that the vulnerability cannot be exploited to obtain console information on Nintendo Switch 2.
Nintendo posted the following preventive measures in today’s document:
Please update your console to the latest system version (23.0.0).
You can check the current system version applied to your Nintendo Switch. From the HOME Menu, select System Settings > System. You can also update the system version.
If you cannot update your system to the latest version right away, please note the following points when using your Nintendo Switch console.
Make sure you are in an environment where a third party cannot scan the QR code displayed on the console screen (or the TV) when you use the Send to Smartphone feature in the Album or use a kart to play Mario Kart Live: Home Circuit.
Avoid using a smart device other than your own when using the Send to Smartphone feature in the Album. Similarly, avoid using karts other than your own when playing Mario Kart Live: Home Circuit.
In case you missed it, a huge update went live on Nintendo Switch 2 overnight, adding in a bunch of features. Catch up on that here.
