Server Version#: 1.31.1.6733-bc0674160 Player Version#:

The story I saw implied Plex was responsible, saying that the LastPass developer also used it. If you have a link with more details, please share it. I’m not ready to crucify Plex yet.

This is all I’m seeing: [image] LastPass: DevOps engineer hacked to steal password vault data in 2022 breach LastPass revealed more information on a "coordinated second attack," where a threat actor accessed and stole data from the Amazon AWS cloud storage servers for over two months. …

I think at this point it’s assumed he was hacked via his Plex server but there aren’t many details: [image] LastPass says employee’s home computer was hacked and corporate vault taken Already smarting from a breach that stole customer vaults, LastPass has more bad news. …

[image] Plex Remote Code Execution Exploit used in Lastpass Breach? General Discussions https://arstechnica.com/information-technology/2023/02/lastpass-hackers-infected-employees-home-computer-and-stole-corporate-vault/ From the article "“This was accomplished by targetin…

[image] sfire38: I think at this point it’s assumed he was hacked via his Plex server but there aren’t many details: Nothing shown to support that. Please be very careful with assertions and assumptions. “ASSUME” is dangerous. Makes an ASS of U and ME :slight_smile: From “Home Comput…

This is where I first saw plex mentioned by name, but I’m not sleuthing this story… I tried to point out buffer overflows in the past, and was not responded to.

I remember this. Interestingly, ArsTechnica heard from sources that the engineer’s computer was hacked through a vulnerability found in the Plex media platform. Twelve days after the LastPass attack, Plex confirmed that it had also suffered an attack that resulted in 15 million users’ passwords be…

As mentioned in the duplicate thread on this topic though, the question is, is this a new event or the old one ? I agree that this type of ‘news’ item (quoted below) needs to be approached with a high degree of scepticism especially as the source asked to be kept anonymous. ArsTechnica heard from…

Well, then how about an official response then about my email sent to security@plex.tv on 1/29/2022 about buffer overflows. Might have less fuel for the boat if you can higher a well qualified security team.

[image] Plex Remote Code Execution Exploit used in Lastpass Breach? General Discussions We have not been contacted by LastPass so we cannot speak to the specifics of their incident. We take security issues very seriously, and frequently work with external parties who repor…

Does 1.31.1.6733-bc0674160 Fix the Remote Code execution vulnerability that Lastpass's Developer saw

Plex Media Server

JohnAlex February 28, 2023, 10:41pm 5

Topic		Replies	Views
Plex Remote Code Execution Exploit used in Lastpass Breach? General Discussions	58	2309	June 11, 2023
Plex Media Server Remote Code Execution Vulnerability General Discussions	3	267	June 11, 2023
So Plex was hacked, what now? General Discussions	122	10806	December 18, 2025
Does Plex media server use "React" and if so do they have a fix? Plex Media Server server-windows , server-mac , server-linux , server-nvidia-shield , server-docker , server-qnap , server-synology , server-unraid , server-western-digital , server-truenas	2	108	March 10, 2026
Plex media server.exe is trying to access your login info in Firefox? Plex Media Server server-windows	37	682	June 7, 2022

Does 1.31.1.6733-bc0674160 Fix the Remote Code execution vulnerability that Lastpass's Developer saw

Related topics