Physical copies of Civilization 7 recalled amid Switch 2 security exploit

A serious security vulnerability has turned physical copies of Civilization 7 on the Nintendo Switch into a hot commodity for homebrew enthusiasts and hackers. According to reporting by Kotaku, the game’s physical cart contains an unpatched exploit that allows users to bypass system security on the Switch 2, prompting publisher 2K to reportedly initiate a recall of the physical product.

The CivSwitch Exploit

The vulnerability, dubbed “CivSwitch” by creator and modder Gezine, allows users to execute custom code on the console by connecting a USB device, such as a smartphone, to the system while running the game. As noted by Kotaku, the Switch 2 hacking community has quickly mobilized around this discovery, using forums like Reddit to share methods for leveraging the game to access save files, run homebrew applications, and mod games. While current iterations of the exploit do not enable the running of pirated game dumps, the speed at which the scene is evolving—aided by AI-assisted coding tools—has made the situation a significant concern for publishers.

2K reportedly pulling stock

In an apparent effort to contain the exploit, 2K has begun recalling physical copies of the strategy title. Multiple reports from users suggest that pre-orders for the game are being cancelled by major retailers. One customer shared a translated notice from Amazon citing a mandate from 2K regarding “technical and security-related requirements” as the reason for the cancellation. While some retailers have reportedly offered customers digital code-in-box versions of the game, that alternative does not replicate the vulnerability found on the physical cartridge.

Why it matters

For the average player, this recall effectively creates a scarcity of physical copies of Civilization 7 for the Switch. If you have been waiting to pick up a physical copy of the game, you may find availability significantly limited or encounter cancellations from major retailers.

This incident highlights the ongoing tension between console manufacturers and the homebrew community, which is being accelerated by generative AI tools that make reverse-engineering code faster than ever. If you currently own a physical copy of Civilization 7, be aware that it is currently the target of intense scrutiny due to this security flaw. For those interested in the security landscape, it serves as a reminder of how quickly a single unpatched exploit can impact hardware security across an entire platform.