Plex Urges Immediate Update to Media Server Over Security Flaw

Plex, the widely used application for organizing and streaming personal media collections, has issued a warning to users regarding a significant security vulnerability. The company is urging those operating specific versions of the Plex Media Server to update immediately to ensure their systems remain secure.

Details of the Security Update

According to a report from BleepingComputer, Plex has identified a potential security issue affecting server versions from 1.41.7.x to 1.42.0.x. Users are encouraged to upgrade to the latest version, 1.42.1.10060, as soon as possible. An email sent by the company states, “We recently received a report via our bug bounty program that there was a potential security issue affecting Plex Media Server versions 1.41.7.x to 1.42.0.x.”

The email emphasizes the importance of this update, noting that it addresses a serious bug that has now been patched. Plex has made the new version available for download through the regular server management page or directly from their website.

Implications of the Vulnerability

While Plex has not disclosed specific details regarding the nature of this vulnerability, the absence of a CVE identifier suggests it is a critical issue that needs immediate attention. As news of this flaw spreads, there is a heightened risk that malicious actors may attempt to exploit unprotected systems.

BleepingComputer highlights that Plex has faced similar challenges in the past, particularly concerning remote code execution vulnerabilities, which pose significant risks to users. Even those who believe they are not running affected versions should verify that their software is updated to 1.42.1.10060 or later to ensure they are adequately protected.

Plex users are encouraged to take this warning seriously and check their server versions promptly. While the company has a generally strong track record regarding security, this incident serves as a reminder of the importance of maintaining updated software to safeguard personal data and media collections.

Users can find the updated version on the Plex website at https://www.plex.tv/media-server-downloads/. It is crucial to act quickly to minimize the risk of exposure to potential threats.