The vulnerabilities affect both the Plex Media Server and the Plex Desktop app for Windows, macOS, and Linux. According to the advisory, the flaws could allow an attacker to execute arbitrary code or gain unauthorized access to sensitive data, depending on the attack vector. While specific technical details were not fully disclosed, Plex has confirmed that the issues are addressed in the newest software releases.

• Affected software: Plex Media Server and Plex Desktop (all prior versions before the latest update).
• Recommended action: Update to the latest version available from the official Plex website or through the in-app update mechanism.
• Additional guidance: Users should verify that their server is not exposed directly to the internet without proper firewall rules, as this increases the attack surface.

Plex has not yet provided a full list of vulnerability identifiers, but they stress that the patches are critical. Administrators running Plex on NAS devices or dedicated servers should check for updates through their device’s package manager or the Plex channel. As with any security advisory, it is wise to review access logs for unusual activity after updating.

Source: Unknown

Are you running Plex Media Server in your environment, and how quickly can you roll out these updates across your user base?