A newly published proof-of-concept called Relapse-Exploit targets PlayStation 5 consoles running firmware versions 7.00 through 13.60, chaining a browser-based WebKit compromise with a kernel use-after-free vulnerability to obtain kernel-level read/write access.
The public project frames the release as material for educational and security-research use, while cautioning that attempts can cause browser stalls, system hangs, kernel panics, data loss, or potential account restrictions.
The exploit chain begins in the PS5 browser environment, where the researchers use JavaScriptCore (JSC) information leaks and a mismatch involving a structured-clone object pool.
PS5 Relapse Jailbreak Uses WebKit and Kernel Exploit
According to the PlayStation, this condition corrupts a typed array, creating the browser-stage primitive needed to break out of the WebKit sandbox.
Typed-array corruption is a serious memory-safety condition because it can let an attacker manipulate memory representations in ways the runtime did not intend.
Relapse then pivots from the browser context to the PS5 kernel. The repository describes the second stage as combining an address leak with a race condition in aio_multi_wait, resulting in a use-after-free (UAF) vulnerability.
A UAF occurs when software continues accessing an object after the memory assigned to it has been released, potentially enabling an attacker to reclaim or alter that memory.
In this case, the NTFargo states that the chain establishes kernel read/write capabilities, a high-privilege position that can undermine platform security boundaries.
Kernel read/write access is particularly significant because it can enable modification or inspection of sensitive operating-system memory, facilitate payload execution, and weaken protections intended to isolate applications and signed software.
The project includes offset files, source code, and payload-related components, suggesting the exploit is built around firmware-specific memory layouts rather than being a universally portable technique.
The developers acknowledge that reliability remains an issue. The WebKit component may require several attempts, and the project documentation advises users to reload the page when the browser stalls.
The kernel phase may also hang or panic the console, requiring a reboot before another attempt.
These conditions underscore the instability of exploiting low-level memory-corruption flaws on consumer hardware, particularly when timing-dependent race conditions are involved. The release also highlights the defensive importance of prompt firmware maintenance.
Sony advises PS5 owners to install the latest system software as soon as it becomes available, noting that updates can include security fixes and that delayed patching may expose consoles to security risks or affect proper operation.
Sony further warns that altered consoles or software obtained outside its official update process can affect warranty and repair eligibility.
For security teams and PS5 owners, Relapse shows how browser memory corruption and a kernel race can combine into a full privilege-escalation chain.
Users seeking to maintain the platform’s intended security posture should keep consoles on supported, current firmware and avoid untrusted payloads or modified system components.
Join 16,000+ SOC teams using ANY.RUN to streamline threat investigations and reduce manual effort. Explore for your team
