The patched exploit, originally released by security researcher Sammy 'pepsipu' Hajhamid on October 22, relied on an integer overflow bug within the backward-compatible Switch 1 programming application SmileBASIC 4. While title-specific exploits in apps like SmileBASIC 4 and Civilization VII remain functional, sandbox escape vectors have been fully closed, preventing full system privilege escalation beyond the restricted app environment.
Nintendo's official changelog omits any mention of security patches, listing only minor additions such as accessibility tweaks and eShop family gifting groundwork. Buyers holding consoles on firmware 23.0.1 or earlier should avoid connecting to Nintendo servers if preservation of legacy kernel exploits is desired.
