A modder known as Zortos has discovered a method to gain full access to the Windows desktop environment within NVIDIA's GeForce NOW service. The technique allows users to bypass the platform's standard gaming-only interface and interact directly with the underlying operating system.
The exploit centers on the free-to-play game Trove, which is available for download via Steam. By utilizing the service's 'Install-to-Play' feature, the method replaces the game's main executable file with a modified version developed by another modder, dpadGuy. This altered file deceives Steam into believing the game is launching, while actually opening the full Windows desktop.
Access to the C: drive is achieved through the integrated browser's address bar.
The hardware specifications available through this exploit depend on the subscription tier used. Zortos utilized the GeForce NOW 'Ultimate' tier to demonstrate the method. Reports regarding the specific graphics processing unit vary: some sources identify the GPU as an NVIDIA RTX Pro 6000D to account for the 48 GB of VRAM, while others list it as a GeForce RTX 5080. The system also features an AMD EPYC 9375F 32-core processor and 56 GB of system memory.
With access to the full desktop and high VRAM capacity, Zortos successfully ran local AI models on the GeForce NOW servers. In one instance, he attempted to run the Gemma 4 AI model using LM Studio on the infrastructure. The exploit also permits the installation of other applications and allows for customization of the Windows taskbar.
The exploit is still functional and users with persistent storage can maintain access between sessions.
Despite these capabilities, the method has limitations. Some users have reported that opening File Explorer causes the GeForce NOW session to close immediately. Additionally, steps involving file downloading are often blocked during the process, restricting certain types of data transfer.
This method requires a paid GeForce NOW subscription and does not function on the free tier or on GeForce NOW Alliance services provided by third-party companies. Zortos demonstrated the technique in a video released on August 1st.
Using this exploit violates NVIDIA's terms of service, as GeForce NOW is not marketed as a general-purpose cloud desktop service. Consequently, employing these methods carries the risk of accounts being permanently banned by NVIDIA. As of now, NVIDIA has not issued an official statement regarding the exploit.
