Developers Exploit Trove Flaw to Run Full Windows Desktop on Nvidia GeForce NOW
Developers Zortos and dpadGuy have bypassed Nvidia GeForce NOW's game-only restrictions to access a full Windows desktop on the cloud gaming platform. Using a vulnerability in Trove and Steam's built-in browser, they replaced game files to launch the Windows environment, enabling deployment of Wallpaper Engine and AI large language models via the open-source tool SalsaNOW. The exploit works only for paid subscribers, not free-tier or third-party alliance partner users. Nvidia has yet to issue an official statement or fix as of August 2026, leaving the access method temporarily available to paying customers.
Players have successfully broken past Nvidia GeForce NOW's restrictions to unlock a full Windows desktop. The cloud gaming service typically permits only specified supported games, but developer Zortos and collaborator dpadGuy exploited a system vulnerability to bypass the walled-off environment and directly call up the full Windows desktop running on cloud servers.
In the demonstration, Zortos used Steam's built-in web browser to access local system folders, obtain auxiliary executable files, and replace files in the game directory. When the game launched, the system presented a Windows environment replete with the Start menu, taskbar, and desktop icons. The developers also ran Wallpaper Engine dynamic wallpapers and deployed LM Studio and the Gemma 4 AI large language model, a process enabled by the open-source tool SalsaNOW developed by dpadGuy.
The bypass mechanism carries limitations. The method works only for GeForce NOW paid subscribers; the free tier and third-party alliance partner services are unaffected. Browser download permissions remain restricted, and the session timeout mechanism persists. Accidentally closing core components will terminate the session, although users with persistent storage can retain their data. As of August 2026, Nvidia has released neither an official statement nor a fix patch, leaving paid users able to attempt this access route for the time being.
Why this event matters
The event has a measured impact on 1 industry. The strongest current signal is negative for Cloud Services & Data Centres, with intensity 50/100 and 70% confidence over a short term horizon.
Impact figures are analytical estimates that combine direction, intensity, confidence and event importance. They are not investment advice.