Nintendo Switch players urged to update now over QR code security flaw
Sharing screenshots and videos could expose users.
Image by Cybernews.
- Nintendo urges original Switch owners to install update 23.0.0 to fix a security flaw.
- The flaw affects QR codes shown when players share screenshots or videos with a smartphone.
- An attacker within wireless range could scan the QR code and potentially access console information.
- Nintendo says Switch 2 is not affected and reports no known real-world attacks.
Key Takeaways by nexos.ai, reviewed by Cybernews staff.
Nintendo is urging owners of the original Switch to update their consoles after disclosing a security flaw that could expose players who share screenshots or videos with a smartphone.
The issue, tracked as CVE-2026-82079, affects Nintendo Switch consoles running software earlier than version 23.0.0.
The Japanese video games giant disclosed the flaw on Thursday after it was reported by external security researchers, who are not named in the company’s advisory.
The vulnerability affects the Switch’s local wireless networking and takes the form of a stack-based buffer overflow.
An attacker within wireless range could potentially exploit it by sending network traffic to the console and executing code on it.
For players, this would require a fairly specific set of circumstances.
QR code flaw
Nintendo says an attacker would need to directly scan a QR code displayed on the Switch or connected TV.
These codes appear when players use the “send to smartphone” feature to transfer screenshots or video and when using a kart with Mario Kart Live: Home Circuit.
If an attacker can scan one of these QR codes, Nintendo warns they could potentially run unauthorized code or obtain information stored on the console.
While that raises the possibility of more serious attacks being developed using the flaw, the company did not say that the issue could be exploited to steal Nintendo accounts.
There is also no evidence that it has yet been used in real-world attacks [as of September 10th].
Nintendo said that Switch 2 is not affected.
The simplest way to mitigate this issue is to install Nintendo Switch system update 23.0.0, which addresses the vulnerability.
Stay updated with our latest stories and follow us on social media
Be the first to discover new stories, ideas, and updates from our team.
Players who cannot update immediately are advised to make sure nobody can see or scan QR codes displayed by their console.
Nintendo also advises players to avoid using someone else’s smart device when sharing photos or videos, or someone else’s kart when playing Mario Kart Live: Home Circuit.
