Plex is acting as a virus!

Server Version#: 1.18.7.2438
Player Version#: Unknown - Roku

This has to be a bug with Plex’s Roku authentication. I traveled to Mexico over a year ago and connected my Plex to an AirBnB Roku there, and ever since I periodically get random connections from a Roku device in Mexico.

It is my account that is connecting, not any of my other users or guest accounts or anything.

I have, multiple times, gone to authorized devices and removed every single one, changed my account password, and I have no webhooks. There’s no reason this Roku device should still be linked to my account, yet the users have no problem connecting and streaming content.

How can I either fix this, or prove it’s an actual bug/vulnerability?

Did you try changing your password?

Multiple times long ago. I think there’s some sort of cached authentication with Roku that’s allowing it to re-authenticate.

Have you ticked that box to sign out all devices?

Yes I did that long ago. I did the gambit before, even uninstalling in case something was cached on the server.

This has been fixed for you.

Thank you? Just for sanity’s sake, is this a bug where the authentication is persisting somehow? I’ll avoid future un-trusted Roku devices and/or other type of things if that’s the case.

What did you do? Did you end his session on the server side?