PS5 Relapse Jailbreak Exploit Unveils Unprecedented Access
PlayStation 5 security has endured one of its most severe blows in recent years. Developer Nathan Fargo has published Relapse, an unprecedented exploit chain designed for the PS5 operating on system software versions ranging from 7.00 to 13.60. Upon successful exploitation, the console surrenders kernel memory access, empowering users to execute third-party software, launch homebrew applications, and utilize instruments for deploying unsigned packages.
The Firmware 13.60 Breakthrough
The upper boundary of this firmware support proves particularly significant. On September 16, developer Sonic_Iso demonstrated kstuff functioning on firmware 13.60, and two days later, announced the imminent release of a jailbreak alongside novel payloads. Relapse has metamorphosed these preliminary demonstrations into a publicly accessible instrument complete with open-source code available in the official repository.
The intrusion initiates within the WebKit browser engine. The primary stage exploits JavaScriptCore vulnerabilities to corrupt memory, paving the way for an independent exploit to assault the PS5 kernel via a use-after-free vulnerability. A triumphant breach grants the capacity to read and manipulate kernel memory, subsequently triggering an ELF loader to initialize auxiliary programs.
Expanding Capabilities with etaHEN
The standard payload arsenal incorporates kstuff, ShadowMountPlus, and etaHEN. This latter utility transforms the compromised PS5 into a vastly more liberated ecosystem. It accommodates homebrew, debugging functionalities, FTP access, PKG installations, game dumping, plugins, and fPKG integration. The fPKG format facilitates the execution of unsigned game packages; thus, technically, the jailbreak paves a pathway for launching unlicensed copies. However, the architects of Relapse emphatically stress that the project exists strictly for security research and vehemently denounces piracy.
PS5 Pro Compatibility and Inherent Limitations
Compatibility extends to the PS5 Pro, provided the console harbors an appropriate system software iteration. Initial user evaluations have already corroborated the triumphant execution of Relapse on a PS5 Pro running firmware 13.40. Because antecedent exploitation techniques also functioned on the PS5 Pro, the hardware variant itself presents no inherent impediment to exploiting compatible firmware.
The paramount limitation directly correlates to system updates. Sony deployed firmware 14.00 on September 16, 2026, whereas the declared operational spectrum of Relapse concludes at 13.60. Consequently, PS5 proprietors utilizing firmware 14.00 remain entirely precluded from leveraging this published exploit chain. Firmwares preceding 7.00 fall outside the purview of Relapse, although alternative jailbreak methodologies exist for those antiquated versions.
Stability and Security Risks
Presently, Relapse cannot boast flawless stability. The developers caution that the browser exploitation stage occasionally necessitates multiple attempts, and an error during the kernel exploitation phase can precipitate a system freeze or a catastrophic console crash. The repository explicitly enumerates substantial risks, including data loss, erratic performance, and potential account bans.
The notion of a complete PS5 compromise necessitates clarification. Relapse bestows read and write privileges over kernel memory and facilitates the execution of custom payloads. Nevertheless, the developers do not claim the absolute subversion of every hardware security tier within the console. Yet, for the average PS5 owner, the distinction remains monumental. Previously, such profound capabilities remained tethered to drastically older firmwares and significantly more cumbersome exploitation chains.
Momentum surrounding PS5 exploitation has accelerated precipitously in recent months. During the spring, enthusiasts successfully booted Linux on compromised consoles wielding antiquated firmwares, though that installation mandated a notably restricted roster of compatible systems. Relapse transports kernel access markedly closer to contemporary system software iterations, exponentially amplifying the volume of potentially susceptible consoles.
Support Our Threat Intelligence
If you find our technology report and cybersecurity news helpful, consider supporting our work.
Buy Me a Coffee
PayPal
