Plex Urges Users to Patch Critical Security Flaws Immediately
Streaming media giant Plex has issued an urgent warning to its users, advising them to update their desktop clients and media servers as soon as possible to patch multiple critical security vulnerabilities. The company has released new versions of its software, Plex Media Server 1.43.3 and Plex Desktop 1.115.0, which address the security issues.
The affected versions of Plex’s software are those running on servers or desktops with version numbers up to 1.43.2, and users have been emailed by the company to alert them to the update. While Plex hasn’t disclosed any specific details about the vulnerabilities, it has emphasized the importance of updating to the latest versions as soon as possible.
It’s worth noting that this is not the first time Plex has faced criticism for its handling of security issues. In August 2025, the company warned users about a high-severity vulnerability that allowed threat actors to steal server owner credentials. Two years earlier, in March 2023, the US Cybersecurity and Infrastructure Security Agency (CISA) flagged a remote code execution flaw in Plex Media Server as actively exploited.
The security flaws in question are not publicly disclosed, but it’s likely that attackers will try to reverse-engineer the patches to develop an exploit. This is why it’s crucial for users to update their software immediately, rather than waiting for more information about the vulnerabilities.
Plex has made it clear that updating to the latest versions of its software is essential to address these security flaws. Users can download the updated versions from the official downloads page or the server management page. It’s also worth noting that Plex has taken a proactive approach by emailing users directly, which is unusual for the company.
The importance of patching vulnerabilities cannot be overstated. As CISA noted in its report on actively exploited threats, once attackers have valid credentials, only 37% of their actions are blocked. This highlights the critical need for organizations and individuals to keep their software up-to-date with the latest security patches.
In conclusion, users should take immediate action to update their Plex Media Server and desktop clients to the latest versions. By doing so, they can protect themselves from potential attacks and ensure that their streaming media is secure. It’s also essential to stay vigilant and regularly check for updates on software and systems to prevent similar security issues in the future.
As a best practice, users should also prioritize updating their Plex Media Server if it’s running on a NAS device. While the updated version may not be available in the package manager yet, users can install it manually. This will help ensure that their server is secure and protected from potential attacks.
Source: Bleeping Computer — 2026-09-03