A modder going by Zortos, working with developer dpadGuy, has discovered a method to escape GeForce NOW's restricted game-streaming interface and access the full underlying Windows desktop running on Nvidia's cloud hardware. The exploit effectively turns a paid GeForce NOW subscription into a rentable, high-end Windows PC in the cloud, complete with taskbar, start menu, desktop icons, and system tools.
The trick relies on a file-swapping method rather than a deep security flaw in Nvidia's infrastructure. It uses Trove, a free-to-play MMO available in any GeForce NOW library. After launching the game, a user opens Steam's built-in web browser during setup, navigates to the local C: drive, and finds the path of Trove's main executable inside its Steamapps folder. Using a modified executable developed by dpadGuy, the user swaps out Trove's real launch file for a decoy. When the game is subsequently launched from the GeForce NOW interface, Steam is fooled into thinking it's starting Trove, but the swapped file instead opens a fully functional Windows desktop on Nvidia's remote hardware.
Once inside, access is largely unrestricted. Zortos demonstrated running Wallpaper Engine for animated desktop backgrounds and LM Studio, which he used to run the Gemma 4 AI language model locally on Nvidia's cloud GPU, reportedly achieving 41 tokens per second on the Ultimate tier, which provides 48GB of VRAM via an RTX Pro 6000D. Other users have reportedly used the same exploit to install games outside GeForce NOW's official catalog, including Grand Theft Auto V. The exploit is streamlined by SalsaNOW, an open-source utility built by dpadGuy that automates much of the setup needed to turn a cloud session into a customized workstation or gaming environment.
The exploit has limitations. It only works with paid GeForce NOW memberships, not the free tier, and not with GeForce NOW services offered through third-party Alliance Partners. Browser downloads remain limited, session time limits still apply, and closing core system components such as File Explorer will instantly terminate the session, though reports of this behavior vary among users. Users with persistent storage can retain their setup and files between sessions, while those without it start from scratch each time. Persistent storage is available for an added monthly fee on top of the 100GB of single-session cloud storage included with paid tiers. Installing mods is possible with persistent storage, but according to Zortos, the lack of administrative rights means this only works on games without anti-cheat software such as BattlEye or Easy Anti-Cheat, making it best suited for offline games.
Using the exploit is against Nvidia's terms of service, since GeForce NOW is intended only for gaming and not as a general-purpose cloud PC service like Shadow PC, and doing so risks account bans. As of the reporting, Nvidia has not issued an official statement or released a patch to close the loophole, and the method remains functional for those willing to follow the setup process detailed in the modder's Discord channel.