Plex urges users to patch multiple security flaws in Media Server and Desktop

· Original article ↗

Summary

Plex released Plex Media Server 1.43.3 and Plex Desktop 1.115.0 to fix multiple security issues affecting Media Server 1.43.2 and earlier. The flaws lack CVE IDs, and Plex urges users to update promptly.

Key points

  • Plex says the fixes address multiple security issues but has not yet shared technical details; CVE IDs have been requested.
  • The vulnerabilities affect Plex Media Server v1.43.2 and earlier.
  • Plex released Media Server 1.43.3 and Plex Desktop 1.115.0 and emailed users running affected versions.
  • Users running Plex Media Server on NAS devices may need to install the updated package manually if it is not yet available through their package manager.
  • Plex warned users to update before attackers could reverse-engineer the patches and develop exploits.

Article Details

Affected Versions
  • Plex Media Server v1.43.2 and earlier
Exploitation Status
unknown
Exploit Availability
unknown
Patch Status
available
Workarounds
  • For Plex Media Server on NAS devices where the update is not yet available in the package manager, install the updated package manually.

CVE

Vendors

Products

Related Articles