A Critical Security Alert Hits Plex Users: Patch Now to Avoid Potential Disaster
Plex, a popular media server platform, has issued an urgent warning to its users about multiple security vulnerabilities affecting their desktop clients and media servers. The company is urging everyone to update their systems immediately to prevent potential attacks that could lead to data breaches and other malicious activities.
The affected versions of Plex Media Server are v1.43.2 and earlier, while the impacted desktop client versions are also older ones. Plex has released patches for these vulnerabilities in the form of updates for Plex Media Server (version 1.43.3) and the desktop client (version 1.115.0). These patches can be downloaded from the official downloads page or the server management page.
It’s essential to note that the details about these security flaws are still limited, as they don’t have CVE IDs assigned yet. However, Plex has emphasized the importance of updating their systems as soon as possible to address these vulnerabilities before attackers reverse-engineer the patches and develop an exploit. This is a critical warning, considering the company’s history of patching multiple critical security flaws over the years.
Plex’s decision to email its users about upgrading their systems to address a specific vulnerability is rare, but it highlights the severity of this issue. In fact, this is one of the few instances where Plex has taken such an action. This move demonstrates the company’s commitment to keeping its users safe and secure.
For context, in August 2025, Plex warned users about a high-severity vulnerability (CVE-2025-34158) that allowed threat actors to steal server owners’ credentials. Similarly, two years earlier, CISA flagged a Plex Media Server remote code execution flaw (CVE-2020-5741) as actively exploited, which could allow attackers to make the server execute malicious code.
The history of these vulnerabilities and attacks serves as a reminder that having valid credentials is still one of the most significant security risks for organizations. In fact, once attackers have valid credentials, only 37% of their actions are blocked by overall prevention scores. This means that organizations must stay vigilant and keep their systems up-to-date to prevent potential breaches.
In light of this critical alert from Plex, users should take immediate action to secure their systems. The best course of action is to update their Plex Media Server to version 1.43.3 and the desktop client to 1.115.0 as soon as possible. By doing so, they can prevent potential attacks and keep their data safe.
The takeaway from this story is clear: users must stay informed about security updates and patches for their systems, especially when it comes to critical vulnerabilities like these. Regularly checking for updates and applying them promptly can help prevent data breaches and other malicious activities. It’s essential to remain vigilant in today’s digital landscape, where threats are constantly evolving.
Source: Bleeping Computer — 2026-09-03