New PS5 Jailbreak Tool Relapse Covers Firmware 7.00 Through 13.60

A new jailbreak exploit for the PlayStation 5 has surfaced on GitHub, targeting a wide range of console firmware versions from 7.00 through 13.60. The tool, called Relapse-Exploit and published by a developer using the handle ntfargo, chains together a browser-based vulnerability with a kernel-level flaw to gain low-level access to the console.

According to the project's documentation, the exploit works in two stages. The first exploits weaknesses in WebKit, the browser engine used by the PS5's built-in web browser, using JavaScriptCore memory information leaks combined with a mismatch in how structured clone objects are pooled. That combination is used to corrupt a typed array in memory. The second stage builds on an address leak and a use-after-free race condition in a system function called aio_multi_wait to establish read and write access to the console's kernel.

To use the tool, owners are instructed to set their PS5's primary DNS setting to a specific IP address, then either run a local Python server or load the exploit directly through a GitHub-hosted page on the console's browser. Once successful, payloads are stored locally and an ELF loader listens on a designated network port for further instructions.

The documentation warns that the process is not entirely reliable. The WebKit stage may require multiple attempts, and users may need to reload the browser if it stalls. The kernel stage carries greater risk: it can cause the console to hang or crash outright, in which case a reboot is required before trying again.

The release credits more than a dozen contributors from the console-hacking and security research community, including names long associated with PlayStation exploitation, such as TheFlow, Flatz, and Sleirsgoevy, among others.

The project's own disclaimer states that it is intended for educational and security research purposes only, and that it does not endorse piracy, unauthorized access, or misuse of commercial hardware. It instructs users to test the exploit only on devices they own or are authorized to access, and to comply with applicable laws. The documentation also warns that the software is provided without warranty, and that users assume all risk, including system instability, data loss, and the possibility of account bans from Sony.

As with previous PlayStation jailbreak releases, the tool is likely to draw interest from both security researchers studying the console's software and users seeking to run unauthorized or homebrew software. Sony has not commented on the release, and it remains unclear whether or when the company might patch the vulnerabilities involved.