TECH NEWS – Someone has found a way to bypass the restrictions of Nvidia’s cloud service, meaning you can now access a powerful setup in the cloud for a low subscription fee.
Zortos, a modder working with developer dpadGuy, found a way to bypass GeForce Now’s restricted game-streaming interface and access the full Windows desktop environment running on Nvidia’s cloud-based hardware. This method essentially transforms a paid GeForce Now subscription into a rentable, high-end, cloud-based Windows PC complete with a taskbar, Start menu and desktop icons, as well as access to various system tools. This trick does not exploit a deep-seated security flaw in Nvidia’s infrastructure, but rather relies on a clever file-swapping method. This is all thanks to Trove, a free-to-play MMO originally developed by Trion Worlds and currently operated by Gamigo. Due to its free-to-play (F2P) model, it is available in any GeForce Now library. After launching the game, users can open Steam’s built-in web browser during setup and navigate to the local C: drive, where they can find the path to the main executable file in the Steamapps folder of the game.
Using the modified executable file developed by dpadGuy, users can replace Trove’s launch file with a fake one. When the ‘game’ is subsequently launched from the GeForce Now interface, Steam thinks it is launching Trove. However, instead of loading the game, the swapped file opens a fully functional Windows desktop environment that runs directly on Nvidia’s remote hardware. Once inside the desktop environment, access is surprisingly unrestricted. Zortos demonstrated how he ran Wallpaper Engine for animated desktop wallpapers, as well as more ambitious software such as LM Studio, which he used to run the Gemma 4 AI language model locally on Nvidia’s cloud-based GPU. Other users have reportedly exploited the same security flaw to install games not listed in the official GeForce Now catalogue, including Grand Theft Auto V.
The tool that makes all this possible is SalsaNow: an open-source utility developed by dpadGuy to streamline the process of running unauthorised software and games in a GeForce Now session. According to its documentation, SalsaNow automates most of the configuration work required to transform a standard cloud-based session into a personalised workstation or gaming environment. However, there are limitations to exploiting this security vulnerability. It only works with paid GeForce Now memberships; the free tier and GeForce Now services offered through third-party Alliance Partners are not compatible with it. This effectively excludes certain regions where the service is not provided directly by Nvidia.
Certain restrictions remain in effect even within paid sessions. Downloads via the browser remain limited, session time limits continue to apply, and closing essential system components (e.g. File Explorer) will end the session immediately. Users who have purchased persistent storage can retain their settings and files between sessions, but those without it will have to start from scratch each time. Both the Performance and Ultimate paid plans offer the same base allowance of 100 GB of cloud storage per session at no extra charge. However, to obtain permanent storage, a monthly fee must be paid: $3 for 200 GB, $5 for 500 GB and $8 for 1 TB. This allows for the installation of mods, which remains one of GeForce Now’s main limitations. However, Zortos noted that, due to the lack of administrator privileges, this will only work for games that do not use anti-cheat software such as BattlEye or Easy Anti-Cheat. Therefore, it is primarily recommended for offline games.
Although the exploit has attracted a lot of attention, Nvidia has not yet responded. For now, the method continues to work for those willing to follow the setup process, which is described in detail on the modder’s Discord server.
Source: WCCFTech (https://wccftech.com/geforce-now-sandbox-escape-windows-desktop-exploit/), Github (https://github.com/dpadGuy/SalsaNOW), Discord (https://discord.gg/fb3XHWHEvE)