Plex Urges Immediate Update for Security Patches

Plex has issued an urgent call for users to update their systems to the newest version after releasing patches for several security vulnerabilities. The updates are incorporated in Plex Media Server 1.43.3 and Plex Desktop 1.115.0, though the company has not disclosed the specific flaws addressed. Plex has requested CVE identifiers for these issues, underscoring the importance of the updates.

Plex’s Recommendations for Users

Plex has advised all server owners and desktop users to upgrade to the latest software without delay. However, those utilizing Plex Media Server on NAS devices might need to manually install the update if it’s not yet available through their package manager. This precaution is crucial for maintaining the security of personal and operational data.

Previous Security Flaws and Their Implications

In August 2025, Plex tackled a significant security issue, CVE-2025-34158, which had a CVSS score of 8.5. This flaw involved an authentication error at the “/myplex/account” endpoint, which could expose server owner details, including administrative tokens, to unauthorized users. Furthermore, an API call to “/api/resources” could enable attackers to discover additional servers, posing a potential risk to the complete Plex infrastructure.

Censys data indicates more than 360,000 devices expose Plex Media Server web interface, yet not all are necessarily vulnerable. Nevertheless, vulnerabilities in Plex have been exploited, such as in February 2021, when updates were released to prevent a denial-of-service (DoS) attack method that leveraged UDP reflection.

Impact of Past Security Breaches

Previous security breaches have highlighted the risks associated with vulnerabilities in Plex. Notably, a 2022 incident involving LastPass was traced back to a Plex Media Server vulnerability (CVE-2020-5741), which attackers exploited to install keylogger malware on an employee’s home computer. This breach underscores the critical need for regular updates and vigilance in maintaining security protocols.

The continuous discovery and patching of vulnerabilities are vital for the security of Plex users. By ensuring that all systems are up-to-date, users can protect themselves against unauthorized access and potential data breaches. As cybersecurity threats evolve, prompt updates and adherence to best practices in network security remain essential.