Plex Media Server - Security Update

We recently received a report via our bug bounty program that there was a potential security issue affecting PMS versions 1.41.7.x to 1.42.0.x. Thanks to that user, we were able to address the issue and continue to improve our security and defenses.

We strongly recommend that everyone have their PMS updated to the most recent version as soon as possible, if you have not already done so.

The new version, 1.42.1, is now available to update through the PMS management page or you can download it here: https://www.plex.tv/media-server-downloads/

25 Likes

As a follow-up to the original report and in an abundance of caution due to a population of servers still on an affected Plex Media Server version (versions 1.41.7.x to 1.42.0.x), we have made adjustments for access to affected servers. Specifically, other users to which the server owner has granted access to the server will not be able to connect to it while the server is running an affected version. Once the server is updated to a fixed version, other users will be able to access again. Server owners will still be able to access the server as normal.

Again, we strongly recommend that everyone have their Plex Media Server updated to the most recent version as soon as possible, if you have not already done so.

The new version, 1.42.1, is now available to update through the PMS management page or you can download it here: https://www.plex.tv/media-server-downloads/

8 Likes
Plex remote access not working {Not available outside your network}
So Plex was hacked, what now?
2nd User Gets "Not authorised You do not have access to this server."
Managed Users cannot access content
Unable to access server after password reset
Plex Server shows as Offline for friends
Can't see server after reset passwords
Someone I shared my server with doesn't have access to my media after password change
Can't connect to library after resetting password
Can't connect to library after resetting password
Breach / Password reset => Switch user not working
Issues with sharing my library with relatives that live outside my household
Unable to access server after password reset
Friends can't see my server
Shared Server with friends but cant access
"No Libraries Found" After Password Reset Android
Password Change
Shared libraries not visible to friends despite Remote Access being green
Mitbenutzerkonto werden Mediatheken nicht mehr angezeigt
My friends no longer have access to my libraries!
Lifetime Plex Pass – Plex Home missing
Plex continually crashing
Managed users lost access to server overnight
Friends recently can’t access my libraries
Remote Access works only for me, not for invited users
Manage Library shows access, but server shows Not Authorized
Amazon fire stick plex app suddenly won't connect to server
Not Authorized to view shared library
Cannot switch user in Plex Amp iOS
I am unable to access my freinds library
Unable to access server after password reset
2nd breach? 2nd email after 6 days
Friends with access to my server no longer have access if you know what I mean
Can't access friends Libraires
Only admin can see library
Friends can no longer access my server
Local users are denied access to the server
Friends with granted access cannot access my PMS
Friends cant access Librareis that I have granted access to
Can't access libraries on kids' profile?
Library Sharing
Cannot connect with browser on local network (Android works)
Roku new experience, how do you show Libraries
Setup Plex Home managed account can't access to server
DSM 7.2.2 - where to find older PMS versions?
Cannot share media server with new plex users
Problem with recent update for WDMyCloud EX4100
Friends with access is unable to access my server despite me having Plex Pass
Server/Library I definitely have access to is telling me I don't have access/am not authorized
Can't utilize local users anymore
[Solved] Server no available for remote straming despite lifetime Plex Pass
Sony Android TV -cannot select server
Other users cant see my libraries
New accounts useless
Plex Live TV Records a Different Program to what is selected
Lifetime Pass owner vs remote watch
Tuner does not tune to 7 channels. Manually tuning with dvbv5-zap works. All other channels work
My friends list cannot access my server
Remote access not working
Managed Accounts stopped working overnight
Non admin users see all libraries but cannot play anything due to multiple playback errors
Error s1001 network only with non admin users. Full admin just fine
All my friends lost access to the plex server