Plex has released emergency security updates for Plex Media Server (version 1.43.3) and Plex Desktop (version 1.115.0) to fix multiple security vulnerabilities. The company is urging all users to update immediately and has not yet disclosed the nature of the flaws — CVE identifiers have been requested but are pending publication. Plex Media Server is widely used in home and small-business networks to stream personal media libraries to devices across the internet.
Users who have automatic updates enabled should verify they are running version 1.43.3 or newer, as automatic updates don’t always apply immediately. Users running Plex Media Server on a NAS (network-attached storage) device face an added complication: the patched package may not yet be available through the NAS manufacturer’s package manager, meaning a manual installation may be required.
How to check if you’re affected
Affected versions include Plex Media Server v1.43.2 and earlier. To check your version, open the Plex Web interface, go to Settings → Troubleshooting → and look for the “Plex Media Server version” field. If it shows 1.43.2 or lower, update immediately by visiting the Plex downloads page or your NAS’s package manager. For Plex Desktop, check the version in the app’s About screen and compare against version 1.115.0.