CivSwitch Released: Gezine Demonstrates Code Execution on Nintendo Switch 1 and Switch 2 Using Civilization VII

# CivSwitch Released: Gezine Demonstrates Code Execution on Nintendo Switch 1 and Switch 2 Using Civilization VII

**Developer:** Gezine

**Release Date:** November 1, 2026

**Version:** CivSwitch 1.0

**Platform:** Nintendo Switch 1 & Nintendo Switch 2

## Gezine Releases CivSwitch Exploit

Developer **Gezine** has officially released **CivSwitch**, an open-source XSS exploit toolchain that enables userland JavaScript code execution on Nintendo Switch 1 and Nintendo Switch 2 through the physical cartridge version of *Sid Meier's Civilization VII*.

The project was published on GitHub on November 1, 2026, alongside its source code, documentation, and Raspberry Pi Pico firmware files.

## How CivSwitch Works

CivSwitch takes advantage of a cross-site scripting (XSS) vulnerability in Civilization VII's multiplayer chat system.

The exploit uses a Raspberry Pi Pico configured as a USB keyboard to automatically enter JavaScript payloads into the game's multiplayer lobby chat.

Once executed, the exploit launches a Remote JavaScript Loader that allows additional JavaScript payloads to be sent from a computer over a network connection.

The project also includes an installer that creates a persistent launch trigger using the game's save data, allowing the payload to run again through the game's Load Game menu.

## Supported Consoles and Firmware

According to Gezine's official GitHub documentation, CivSwitch has been tested on:

- **Nintendo Switch 1:** Firmware 22.5.0

- **Nintendo Switch 2:** Firmware 20.4.0

- **Nintendo Switch 2:** Firmware 23.0.1

The developer states that firmware versions from 20.x.x through 23.0.1 should be compatible.

**Important:** CivSwitch only supports the physical Nintendo Switch 1 cartridge edition of Civilization VII, specifically game version 1.0.0.

## CivSwitch 1.0 Includes

The first public release provides:

- XSS-based JavaScript execution through Civilization VII.

- Raspberry Pi Pico RP2040 and RP2350 firmware support.

- A Remote JavaScript Loader using TCP port 9026.

- A save-data-based persistent execution trigger.

- Tools for sending additional JavaScript payloads.

- Public source code and installation documentation.

## Is CivSwitch a Full Nintendo Switch 2 Jailbreak?

**No. CivSwitch is a userland code execution exploit, not a complete system jailbreak.**

The public release demonstrates JavaScript execution through Civilization VII, but it does not establish kernel-level access, a complete custom firmware solution, or support for launching game backups.

Those capabilities are not demonstrated in the project's official documentation.

## Why This Release Matters

CivSwitch introduces a publicly documented game-based entry point for executing JavaScript on Nintendo Switch 1 and Nintendo Switch 2.

Its compatibility with tested Switch 2 firmware versions, including 23.0.1, makes it a notable development for the Nintendo console security research and homebrew communities.

The release also provides publicly available source code and tools for developers interested in examining the implementation.

## Official Download and Source

**GitHub Repository:**

https://github.com/Gezine/CivSwitch

**CivSwitch 1.0 Release:**

https://github.com/Gezine/CivSwitch/releases/tag/1.0

**Developer:** Gezine

---

**GoldenGames Nexus — Nintendo Switch Homebrew & Exploit News**

*This article is based on the official CivSwitch GitHub repository and its published release documentation. No unconfirmed jailbreak capabilities have been included.*