Plex Urges Users to Update Media Server as Multiple Security Flaws Are Discovered

Plex has urged Media Server administrators and Plex Desktop users to install the latest available releases after discovering multiple security issues affecting its software.

The company released Plex Media Server version 1.43.3 and Plex Desktop version 1.115.0 to address the vulnerabilities. Plex did not disclose technical details about the affected components, vulnerability severity, exploitation conditions, or potential impact.

However, the company confirmed that it has requested CVE identifiers and said it will publish additional information after the CVEs are assigned.

Plex Urges Users to Update Media Server

Plex server owners are advised to update to version 1.43.3 or later as soon as possible, while Plex Desktop users should ensure their systems are running version 1.115.0 or newer.

The announcement should be treated as a security-driven update, particularly by users who operate remotely accessible Plex instances. Plex Media Server is commonly deployed on home servers, NAS appliances, desktops, Linux machines, and Docker containers.

Depending on the configuration, an exposed server can provide remote streaming, account authentication, media library access, and administrative functions.

Although Plex has not stated that the newly fixed flaws are being actively exploited, administrators should not wait for public vulnerability details before applying available patches.

Windows and macOS users with automatic updates enabled should verify that their Plex Media Server deployment has successfully updated to version 1.43.3 or later.

Users who prefer manual updates can download the current installer through Plex’s official Media Server Downloads page. Linux administrators should download the appropriate package for their distribution from the same downloads page.

Ubuntu and Debian-based installations can apply the update by installing the downloaded .deb file with the dpkg utility. Fedora and CentOS users can install the corresponding .rpm package using the dnf package manager.

Administrators should substitute the package filename in the command with the name of the newly downloaded release and confirm that the Plex service is running after the upgrade.

NAS users may face a delay because the updated Plex package might not yet appear in their device vendor’s integrated package manager.

Plex said affected users can manually download the installation package for their NAS architecture and install it via the vendor’s web-based application. Most devices provide a manual installation feature within an App Center, Package Center, Applications, or App Store section.

Docker-based Plex deployments should be updated according to the official PMS Docker repository documentation. NVIDIA Shield owners should open the Google Play Store and install any pending Plex updates.

Following installation, administrators should verify the running version, restart services as necessary, and review remote access settings. Plex users should also avoid exposing management interfaces directly to the internet, maintain strong account credentials, and enable multi-factor authentication.

Give your security team the visibility and context to investigate suspicious activity faster and contain threats before business impact grows. Strengthen Your Investigations with ANY.RUN

The post Plex Urges Users to Update Media Server as Multiple Security Flaws Are Discovered appeared first on Cyber Security News.