ThinkFacility Sign in
  1. Home
  2. Security
  3. Plex Media Server
HighActively exploitedPlex Media Server

Plex Media Server: four flaws attackers are already using, fixed in 1.43.3.10861

Anyone running Plex Media Server at home or on a NAS.

How to fix it

You haveUpdate to
before 1.43.3.10861→1.43.3.10861

Check your version

Version in Plex Web

Settings›General (the version is shown at the top)

From the server itself
curl -s http://localhost:32400/identity

Update

Debian / Ubuntu (Plex repo)
sudo apt update && sudo apt install --only-upgrade plexmediaserver
Docker (official image)
docker pull plexinc/pms-docker:latest
docker compose up -d
Windows / macOS

Plex Media Server tray icon›Check for Updates

If you can't update yet

CISA says to apply the vendor's mitigations, or stop using the product if none are available.

Sources