Recently, Sony released firmware update 14.20 for the PlayStation 5 console system, but well-known hacker Ark Sama revealed that Sony actually quietly patched a major security vulnerability in this update that allowed users to run unauthorized “PKG files” on the console, making it the latest development in the ongoing battle between crackers and Sony. At the same time, a similar major vulnerability has recently appeared even on Nintendo’s Nintendo Switch 2 console.
According to a post on the Reddit forum r/PS5_JailbreakPostOver the past year, hacker Ark Sama has frequently shared various updates and even claimed to have discovered a vulnerability that allows the PS5 console to natively run “fake PKG” files. Simply put, PKG is the package file format used by the PlayStation console system, and so-called fake PKGs can contain content that is not officially authorized or even pirated.
Although in the past, hackers have successfully gotten the PS5 to run unauthorized PKG files, that usually required very complicated methods and would directly affect the game’s performance. As for this vulnerability, which could have moved the cracking of the PS5 one step forward, Sony has now officially eliminated it completely.
Before this, Ark Sama, who had long known about the vulnerability, said he would only publicly disclose the relevant details after Sony officially resolved the issue completely. In addition, he had also proactively reported the vulnerability through Sony’s HackerOne security reporting program, and although Sony does offer rewards to reporters, that did not seem to be Ark Sama’s original intention in reporting it proactively.
According to HackerOne’s vulnerability disclosure guidelines and the agreement between both parties, once a vulnerability has been patched, the researcher can publicly disclose more detailed information in accordance with the relevant terms. Therefore, after Sony officially patched this vulnerability in the PS5 14.20 firmware update, Ark Sama was finally able to share their research findings without violating any rules, while also receiving a bounty from Sony. Whether consoles that have not yet updated to 14.20 can exploit this vulnerability remains unknown.
But besides the PS5, Nintendo’s Nintendo Switch 2 has also recently faced a similar major security vulnerability. According to WCCF Tech, a “user-space vulnerability” discovered in July of this year has begun to be exploited by crackers, allowing external code to run within the execution environment of specific applications or games.
Related reports indicate that hackers can now use in-game software exploits to modify content, and even install homebrew software or download save files. In response, the well-known leak-sharing account Centro Leaks also reposted a video allegedly provided by the hackers, showing a large number of modded characters in Mario Kart World, including Peter from Family Guy and virtual singer Hatsune Miku.
i jailbroke the nintendo switch 2 so i modded cinnamoroll, peter griffin, hatsune miku, and more into Mario Kart World, a switch 2 exclusive now watch my friends and i get cooked by bots learn more and get the exploit https://t.co/ykjgyfrFRp https://t.co/BOcFhejRz1
— pepsipu (@pepsipu) October 22, 2026
When discussing the method, the hacker said he used OpenAI Codex as an aid and eventually succeeded two weeks later in developing a program that could exploit the vulnerability. But as things stand, this approach still has many limitations; it even requires first running a specific Switch game, SmileBASIC 4, to trigger the vulnerability. Therefore, it does not mean the Nintendo Switch 2 console has officially been jailbroken. Moreover, Nintendo has now officially removed SmileBASIC 4 entirely from the eShop, further blocking the risk of this vulnerability being exploited.
Although such cracking or jailbreaking can allow some amateur game developers to bring homemade games to consoles, or to modify and adjust existing games—such as adding various mods or fixing errors or technical issues—these techniques are in fact more often used for illegal activities such as piracy, so console manufacturers will absolutely not leave them unchecked.
From PS5 to Nintendo Switch 2, the recent string of reported vulnerabilities and subsequent patches further demonstrates the ongoing battle between platform holders and hackers. And with AI tools continuing to improve, more and more hackers can more easily find ways to exploit vulnerabilities, and Sony, Microsoft, and Nintendo will all inevitably face even tougher challenges.
Source: KOCPC Chinese