Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws
Read original article ↗AI Summary
Plex has urged users to immediately update their Plex Media Server and Desktop applications to version 1.43.3 and 1.115.0, respectively, to address multiple undisclosed security vulnerabilities for which CVE identifiers have been requested. While specific details about the newly patched flaws were not disclosed, historical vulnerabilities in Plex Media Server have enabled serious attacks, including infrastructure enumeration and unauthorized access. The article highlights past exploited flaws such as CVE-2025-34158, which allowed lower-privileged users to access administrative tokens and discover linked servers, and CVE-2020-5741, which was used in the 2022 LastPass breach to deploy keyloggers on an employee's machine.
AI-extracted · verify before operational use
No entities or IoCs were extracted from this article.