Developer presented Relapse exploit for PlayStation 5

According to the author, the exploit supports firmware versions from 7.00 to 13.60. The method uses the WebKit-based system browser to execute code in user space, and then exploits a Use-After-Free error in the aio_multi_wait kernel function of the Prospero operating system. As a result, the attack provides read and write access to kernel memory, as well as lifts the restrictions of the isolated FreeBSD jail environment and launches an ELF loader on port 9021.

The tool does not permanently modify the firmware, so the procedure needs to be repeated after restarting the console. In the system update 14.00, which Sony released on September 16, this chain of vulnerabilities is already closed.

The project author emphasized that Relapse was created exclusively for research purposes to test the security mechanisms of the platform. In turn, industry publications note that the vulnerability affects retail consoles PS5 and PS5 Pro running on software released before version 14.00.