“Please update your console”
Nintendo released a major system firmware update yesterday, and while most of the focus is on the Switch 2 adding support for VRR in docked mode, the Switch also got a patch.
Tacked on to the end of the official patch notes for the latest Switch update (Version 23.0.0) is a notice about a vulnerability fix.
This “vulnerability” has been confirmed in “limited scenarios” when scanning a QR code and using “Send to Smartphone feature” in the Album, or using a kart to play in Mario Kart Live: Home Circuit.
Subscribe to Nintendo Life on YouTube852k
Nintendo’s official security notice page shares more information about this in a PDF document. Here’s the rundown:
Security Notice for Nintendo Switch – 10th September 2026
The following vulnerabilities can be resolved by updating your system to the latest version.
2026.9.10 Potential Nintendo Switch Console Information Leak Due to Proximity-Based Remote Attack
A vulnerability* on Nintendo Switch has been confirmed in the following limited scenarios.
* To exploit this vulnerability, a bad actor must directly scan the QR code displayed on the Nintendo Switch console screen (or the TV screen).
1. When using the Send to Smartphone feature in the Album
2. When using a kart to play Mario Kart Live: Home Circuit
In either case, this vulnerability cannot be exploited in an environment where a third party cannot scan the QR code displayed on the Nintendo Switch console screen (or the TV screen).
Conversely, if a third party can directly scan the QR code, they could run unauthorized code on your Nintendo Switch console or obtain information stored on the console.
Affected Products
This issue affects Nintendo Switch (system version earlier than 23.0.0).
Note: This vulnerability cannot be exploited to obtain console information on Nintendo Switch 2.
As Nintendo notes, this issue affects Switch system running on any update before Version 23.0.0. It’s also provided some “Preventive Measures”, asking users to update to the latest system version. If you can’t do this “right away”, it recommends the following:
“Make sure you are in an environment where a third party cannot scan the QR code displayed on the console screen (or the TV) when you use the Send to Smartphone feature in the Album or use a kart to play Mario Kart Live: Home Circuit.”
“Avoid using a smart device other than your own when using the Send to Smartphone feature in the Album. Similarly, avoid using karts other than your own when playing Mario Kart Live: Home Circuit”
You can find out about Version 23.0.0 for the Switch and Switch 2 in our full patch notes post. Nintendo has also updated multiple game updates this week.
