Plex Urges Immediate Patching of Critical Security Vulnerabilities

Plex has issued an urgent advisory for users to update their desktop clients and media servers to address multiple unassigned security vulnerabilities affecting versions 1.43.2 and earlier. The latest updates, Plex Media Server 1.43.3 and Plex Desktop 1.115.0, were released to mitigate these issues. Users running affected versions have been directly notified via email to secure their systems promptly. The vulnerabilities could potentially be exploited if not patched, as attackers may reverse-engineer the updates. Previous vulnerabilities, including CVE-2025-34158 and CVE-2020-5741, have posed significant risks in the past, with the latter being flagged by CISA for active exploitation in early 2023. Plex has not yet provided specific details about the current vulnerabilities or their potential impact. Users are advised to manually install updates if they are using NAS devices that may not have the latest version available in their package manager.

Key Points: • Plex users must update to versions 1.43.3 and 1.115.0 to mitigate critical vulnerabilities. • The vulnerabilities are unassigned CVEs and could be exploited if not patched quickly. • Plex has a history of critical vulnerabilities, including CVE-2025-34158 and CVE-2020-5741.