Plex urged users to update Plex Media Server and Plex Desktop immediately after discovering multiple security vulnerabilities affecting Plex Media Server v1.43.2 and earlier. The company has released patches and emailed affected users, warning that attackers could reverse-engineer the fixes before CVEs are published. #Plex #PlexMediaServer #PlexDesktop
Keypoints
- Plex released security updates for Plex Media Server 1.43.3 and Plex Desktop 1.115.0.
- The vulnerabilities affect Plex Media Server v1.43.2 and earlier.
- Plex emailed affected users and urged immediate updating.
- Users on NAS devices may need to install the updated package manually.
- Plex previously warned about CVE-2025-34158 and an actively exploited Plex RCE flaw, CVE-2020-5741.