Plex is urging users to update their installations after releasing new versions of Plex Media Server and Plex Desktop that address multiple security vulnerabilities.
The fixes are included in Plex Media Server 1.43.3 and Plex Desktop 1.115.0. Plex has not disclosed technical details about the vulnerabilities, but said it has requested CVE identifiers for the issues.
The company recommends that all Plex server owners and Desktop users install the latest versions as soon as possible. Users running Plex Media Server on NAS devices may need to manually install the update if the newer package has not yet appeared in their device’s package manager.
Plex has dealt with several security issues in recent years. In August 2025, the company fixed a high-severity vulnerability tracked as CVE-2025-34158 that could expose a server owner’s account information, including an administrative access token, to authenticated users with lower privileges.
The flaw could also be combined with a separate API request to identify other Plex servers accessible to the same owner, potentially allowing attackers to map their Plex infrastructure.
Data from Censys previously showed more than 360,000 devices exposing the Plex Media Server web interface, although not all publicly accessible systems were necessarily vulnerable.
Plex Media Server has also been targeted in earlier attacks. In 2021, the company patched a vulnerability that allowed attackers to abuse affected servers to amplify UDP traffic as part of distributed denial-of-service attacks.
Another serious Plex vulnerability, CVE-2020-5741, was later linked to the 2022 LastPass breach. Attackers reportedly compromised an employee’s home computer through the vulnerable Plex Media Server and installed keylogger malware.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
Plex users are therefore advised to update their servers and Desktop applications to the latest available versions rather than continuing to run older releases.
