BODY: A QR code on your TV looks harmless, but Nintendo says someone nearby could have used one to pull data from your console.
Nintendo has published a security notice titled "Possible Console Information Leak via Proximity Remote Attack on Nintendo Switch." The problem was in QR codes the original Nintendo Switch shows on screen. If a third party scanned one of those codes, they could have gotten information specific to that console.
Two features were affected. The first is the Album's "Send to Smartphone" option, which shows a QR code so you can move screenshots and clips to your phone. The second is Mario Kart Live: Home Circuit, the mixed-reality racing game that uses real remote-control karts. Nintendo says the Switch 2 is not affected.
The fix is in System Version 23.0.0, released September 10, 2026. If you haven't updated yet, Nintendo asks that you only use these QR code features where other people can't see the screen. The notice doesn't mention any known attacks in the wild. A security PDF with the technical details is on Nintendo's site.
This isn't an emergency, but it's still worth updating now. The flaw only works if someone is physically close enough to scan your screen. That makes it a bigger risk in shared spaces than in your living room.
The insider take
The "nearby attacker" part matters more in Japan than it might sound. Here the Switch is a public device as much as a home console. People play it on trains, in family restaurants, at friends' apartments and at local tournaments. The screenshot-to-phone QR code gets heavy use from players sharing clips on X. A stranger scanning a screen over your shoulder in a packed Yamanote Line car isn't hard to picture. Japanese gaming media have also noticed the timing: Nintendo is still patching the original Switch more than a year after Switch 2 came out. With over 150 million units sold, the older console is still the one most of Japan plays on.
Originally reported by GAME Watch (Japanese).