Today, 01:43 AM
As posted on the Xbox One Research Wiki, kernel-level code execution is possible on Xbox consoles via the Game Script UWP App.
At the moment, things are still in their infancy. However, given that the Xbox One is over a decade old at this point, it is exciting to have a kernel exploit for the modern Xbox family of consoles. This could lead to some good things in the near future.
This exploit is compatible with the Xbox One, Xbox One X, Xbox Series S, and Xbox Series X. All Xbox consoles after the Xbox 360 share the same OS.
This will likely be patched in the next system update for Xbox consoles, so if you are interested in messing around with the Xbox, you should prepare your console ASAP.
As posted by Xbox One Research, to prepare, do the following:
A proof-of-concept exploit has been released on GitHub by carrot_c4k3.
The Xbox OS version you should be on is 10.0.25398.4478. If you are currently higher than this, your console could be enrolled in the Insider Preview program. If you leave the preview program from the Insider app, you should currently end up on system update 10.0.25398.4478 as of the time of writing. This does factory reset the Xbox, which is something to keep in mind.
It is certainly nice to see something happen with the Xbox One after being out in the wild for over a decade, and even on the newer Series consoles too. Hopefully this is the start of the Xbox scene for more modern Xbox consoles.
At the moment, things are still in their infancy. However, given that the Xbox One is over a decade old at this point, it is exciting to have a kernel exploit for the modern Xbox family of consoles. This could lead to some good things in the near future.
This exploit is compatible with the Xbox One, Xbox One X, Xbox Series S, and Xbox Series X. All Xbox consoles after the Xbox 360 share the same OS.
This will likely be patched in the next system update for Xbox consoles, so if you are interested in messing around with the Xbox, you should prepare your console ASAP.
As posted by Xbox One Research, to prepare, do the following:
- Ensure your Xbox Live account Login-Type is configured as “No barriers”, aka auto-login with no password prompt.
- Set your console as “Home Console” for this account.
- Download the app Game Script.
- Start the app to ensure the license is downloaded/cached.
- Optional: Download Notepad T, as you can copy and paste txt files from a USB drive with this app, meaning you do not need to type a lot of code manually in the future.
- Take your console offline. To make extra sure it cannot reach the internet, set a manual primary DNS address of 127.0.0.1.
A proof-of-concept exploit has been released on GitHub by carrot_c4k3.
The Xbox OS version you should be on is 10.0.25398.4478. If you are currently higher than this, your console could be enrolled in the Insider Preview program. If you leave the preview program from the Insider app, you should currently end up on system update 10.0.25398.4478 as of the time of writing. This does factory reset the Xbox, which is something to keep in mind.
It is certainly nice to see something happen with the Xbox One after being out in the wild for over a decade, and even on the newer Series consoles too. Hopefully this is the start of the Xbox scene for more modern Xbox consoles.

