Skip to content
New CivSwitch Tool Enables Offline Homebrew Exploits on Switch 2

New CivSwitch Tool Enables Offline Homebrew Exploits on Switch 2

First seen 1 Nov 2026, 22:46 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 2, 2026 at 00:14 UTC
  • •CivSwitch enables offline exploitation of Switch 2 using a chat-XSS payload.
  • •Only the 1.0.0 version of Civilization 7 on physical cartridge is supported.
  • •Current testing shows compatibility with multiple firmware versions for Switch 1 and Switch 2.

The CivSwitch toolchain has been released, allowing offline exploitation of the Switch 2 through a chat-XSS payload. It specifically targets the Switch 1 edition of Civilization 7, supporting only the 1.0.0 version on physical cartridges. The exploit utilizes an USB HID macro to inject the payload, which includes a Remote JS Loader bootstrap. The tool is designed for use with RP2040 and RP2350 hardware. Current testing has confirmed functionality on Switch 1 firmware versions 22.5.0 and Switch 2 firmware versions 20.4.0 and 23.0.1. The exploit is not yet confirmed to be in the wild, but it poses a significant risk for users of the affected systems. The CivSwitch tool is available on GitHub for developers and users interested in homebrew applications.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-11-01
CivSwitch toolchain released
The CivSwitch toolchain was made available, allowing offline exploits on Switch 2 using a chat-XSS payload.
Gbatemp
2026-11-01
GitHub repository published
The GitHub repository for CivSwitch was launched, detailing the tool's functionality and usage.
github.com

More articles in this cluster (2)

Extracted Entities (3)

1 / 3

Common questions

What systems are affected by CivSwitch?
CivSwitch targets the Switch 1 edition of Civilization 7, specifically the 1.0.0 version on physical cartridges.
Is there active exploitation of this vulnerability?
No confirmed active exploitation has been reported as of now.
How can I protect my Switch from this exploit?
Ensure your system firmware is updated and avoid using unsupported homebrew tools.