Server Version#: 4.147.1 Player Version#: German news site mentioned that there are still open vulnerabilites in plex media server, CVE-2025-69414 , CVE-2025-69415 and also in the plex.tv backend ( CVE-2025-69416 , CVE-2025-69417 ). Link to the news site: Plex Media Server: Noch ungepatchte Zugriffssc…

Hi, in my Opinion it would help, in general sense, that Plex would provide this kind of information and their own view on the matter, in a more public form. At least when the topic gets published openly in the internet. For me I can say that I don’t have a good feeling, that I and others have to a…

Hi, is there any news on this topic? Mathes

What news are you expecting? The remaining issue is very low-risk.

Hi, maybe I was not good at reading between the lines in the other post above. But as there were some statements in the way of “some things are worked on” or “we are looking into removing the rest”, I assumed that we would get some kind of information if this is now done, or at least some kind of u…

[image] OttoKerner: What news are you expecting? The remaining issue is very low-risk. Well, “fixed” would be good news to read. Together with info on which part of the API changed which way… I don’t want to bother you, but if you mess with an existing endpoint (documented or not), it would…

[image] SwiftPanda16: Please don’t remove the shared tokens from shared_servers. It is useful for the admin to be able to access their own server as another user through the API. For example, being able to change the audio/subtitle preferences on a show, or synchronizing playlists across users. …

sad day for sure as it completely broke PlexAutoLanguages having multi-user support (I didn’t even know that plex was planning on shuttering this eventually until it hit me today due to an issue thread coming up in my (maintained) fork of PAL), since even managed users seem to no longer returning to…

Switching home user still works (but you will also need their PIN if they have one). MyPlex plexapi.myplex - MyPlex plexapi.myplex — Python PlexAPI documentation Bases: PlexObject

https://github.com/pushingkarmaorg/python-plexapi/issues/1598 check this :stuck_out_tongue: switchUser() (and I’m sure switchHomeUser) got broke due to this whole thing for the time being.

I know. switchUser works differently (I wrote it). switchUser() was the “back door” method to switch to any user on your Plex server. switchHomeUser() is a Plex supported method. That’s how all their apps implement Plex Home fast user switching. I think I will remove plex.switchUser() and add a n…

Information related to security Vulnerabilities

Plex Media Server

SwiftPanda16 March 25, 2026, 11:46pm 24

Today is a sad day for 3rd party developers. Shared user tokens are no longer returned from the shared_server endpoint.

6 Likes

Topic		Replies	Views
Plex Server scans for wallets? Plex Media Server server-linux	191	5464	September 14, 2022
Action required: Important notice of a potential data breach General Discussions	413	6234	December 14, 2022
[Implemented] Fix the gaping security holes Feature Suggestions	227	364	July 10, 2020
Plex Content Not Authorized Plex Media Server server-windows	39	796	September 22, 2023
Can Plex staff and potenially Big Brother access my files now? General Discussions	67	8496	December 20, 2019

Information related to security Vulnerabilities

Related topics