GeForce Now exploit unlocks full Windows desktop access

Alfonso Maruccia

Posts: 2,654   +1,001
Staff
In brief: GeForce Now is a cloud gaming service that lets users stream games over the internet in limited sessions. As a pair of modders recently discovered, however, a bit of tinkering can turn it into a formidable system for offloading demanding computing tasks.

GeForce Now can apparently do much more than simply stream a selection of supported games using the AV1 codec. Two modders known as "Zortos" and "dpadGuy" have uncovered a trick to gain full desktop access to the streaming service, allowing them to run custom games and software directly on Nvidia's hardware. Granted, Nvidia will probably patch this loophole eventually, but in the meantime the workaround remains fully functional for anyone willing to follow the modders' steps.

The modders explained how they achieved this unprecedented result in a video tutorial. The clip essentially provides a step-by-step guide on how to access the remote desktop, although they warn that the method only works with a paid GeForce Now subscription. Free-tier users and GeForce Now Alliance Partner services remain limited to AV1 game streaming.

The tutorial is based on the free-to-play game Trove and GeForce Now's ability to expose the Steam client's full interface. From within the current Steam session, users need to access the client's browser and locate a specific executable file in Trove's installation folder. They then need to replace the file with a special version provided by the modders and launch it to finally access the remote desktop.

GeForce Now machines can provide some hefty hardware specifications. Zortos said he was able to access an "Ultimate"-tier machine equipped with an AMD Epyc 9375F 32-core CPU and a GeForce RTX 5080 GPU. The system has 48GB of VRAM and 56GB of total system RAM.

The tutorial demonstrates how the newly discovered desktop access could be used to install Wallpaper Engine from Steam or customize the Windows taskbar. More generally, it could provide broader access to Nvidia's hardware resources, raising significant security and trust concerns. Later, Zortos used the powerful remote machines to install custom AI models, promising that more "juicy" demonstrations are on the way.

It's worth noting that this kind of access sits well outside GeForce Now's terms of service, so anyone attempting this risks having their account suspended or banned.

In any case, the Trove-based method for breaking into Nvidia's cloud gaming service does not appear to be foolproof. Some users who tried the same trick experienced a few unexpected issues, including Windows sessions closing automatically or being unable to download the custom executable file to Trove's folder. Some said the Trove method no longer works, although Zortos reiterated that this is not the case.

Permalink to story:

 
Hacking. Gaining unauthorized access is called hacking. They're not modding game consoles.

Nvidia will never secure Windows. Better companies have tried and failed. The only option for GeForce NOW if it wants to survive to become GeForce Later, is Linux. Make every game run flawlessly on Linux.
 
Renting an Epyc 9375F and RTX 5080 box for a monthly subscription fee to run your own AI models is either a genius hack or the fastest way to get permanently banned, possibly both.

That said, using a Trove executable as the backdoor is delightfully unhinged... every cloud service's weakest link is apparently some obscure free-to-play game nobody remembers exists.
 
Hacking. Gaining unauthorized access is called hacking. They're not modding game consoles.

Nvidia will never secure Windows. Better companies have tried and failed. The only option for GeForce NOW if it wants to survive to become GeForce Later, is Linux. Make every game run flawlessly on Linux.
And the true coder geniuses who manage to secure windows through the kernel were warned by the FBI/NSA not to ever produce it, because it was too secure and they could not hack it. oh well, we will just have to accept the crap they feed us
 
Hacking. Gaining unauthorized access is called hacking. They're not modding game consoles.

Nvidia will never secure Windows. Better companies have tried and failed. The only option for GeForce NOW if it wants to survive to become GeForce Later, is Linux. Make every game run flawlessly on Linux.
How cute you thinking hackers couldn't do the same thing on linux.
 
I've used GeforceNow ever since it was in beta (called something else back then can't remember what)

Anyway, at some point you could log into a full windows desktop and install any software not just unsupported games. I recall installing/playing Aquanaut from Epic game store and FIFA from EA even 7zip and winrar just for kicks, I lost it all on the next logon though.
 
Back