Plex urges users to patch multiple security flaws in Media Server and Desktop

Summary
Plex released Plex Media Server 1.43.3 and Plex Desktop 1.115.0 to fix multiple security issues affecting Media Server 1.43.2 and earlier. The flaws lack CVE IDs, and Plex urges users to update promptly.
Key points
- Plex says the fixes address multiple security issues but has not yet shared technical details; CVE IDs have been requested.
- The vulnerabilities affect Plex Media Server v1.43.2 and earlier.
- Plex released Media Server 1.43.3 and Plex Desktop 1.115.0 and emailed users running affected versions.
- Users running Plex Media Server on NAS devices may need to install the updated package manually if it is not yet available through their package manager.
- Plex warned users to update before attackers could reverse-engineer the patches and develop exploits.
Article Details
- Affected Versions
- Plex Media Server v1.43.2 and earlier
- Exploitation Status
- unknown
- Exploit Availability
- unknown
- Patch Status
- available
- Workarounds
- For Plex Media Server on NAS devices where the update is not yet available in the package manager, install the updated package manually.
CVE
Vendors
Products
Plex DesktopPlex urged users to update Plex Media Server and Plex Desktop immediately after discovering multiple security vulnerabilities affecting Plex Media Server v1.43.2 and earlier.Plex Media ServerPlex urged users to update Plex Media Server and Plex Desktop immediately after discovering multiple security vulnerabilities affecting Plex Media Server v1.43.2 and earlier.
