Nintendo Patches Critical QR‑Code Exploit in Switch Firmware Update 23.0.0

Nintendo has issued system version 23.0.0 to close a serious security gap identified as CVE‑2026‑82079, which could allow a nearby device to run unauthorized code on a Switch console through the QR‑code sharing feature.

The vulnerability resides in the console’s local wireless networking stack that processes QR codes used for quick game transfers and friend connections. By broadcasting a specially crafted QR code, an attacker within range can trick the Switch into interpreting malicious data as legitimate, potentially triggering code execution without user interaction.

All consoles running firmware older than 23.0.0 are susceptible. In the worst case, an exploit could give an adversary the ability to alter game saves, access personal information, or install unsigned software. Although the attack requires physical proximity, the ease of the QR‑code workflow means the threat cannot be dismissed as purely theoretical.

Nintendo’s response, announced shortly after the flaw was reported by the GBHackers community, emphasizes the importance of updating promptly. The company has not disclosed any active exploitation in the wild, but the public disclosure underscores the growing scrutiny of console security as online and local features become more intertwined.

Experts advise Switch owners to apply the update immediately and consider disabling QR‑code sharing when it is not needed. The patch demonstrates Nintendo’s willingness to address emerging wireless attack vectors, and security researchers will likely continue to probe the console’s networking layers for similar issues in future firmware releases.