I checked the plex logs (Plex Media Server.log) today and found the following: Feb 15, 2022 02:11:21.543 [0x7f200a167b38] ERROR - Couldn't check for the existence of file "/root/.mozilla/firefox": boost::filesystem::status: Permission denied: "/root/.mozilla/firefox" Feb 15, 2022 02:11:24.640 [0x7f…

There were two issues identified: Leaking admin tokens (not identified/solved right now) Using Plex Server to steal files form Server (here a fix in the latest Beta has been published; final release is not available until now)

How is there no standard “sigh” emoji available yet. :roll_eyes: will have to do, though it’s a bit stronger than I’d like. The “fixes” mentioned in point #2 above were new logging changes intended to help identify occurrences of credentials/tokens being misused per #1. Which has not been shown t…

The fix I mentioned was that the “Preroll” feature can/could be used to steal non-Media files from the server.

I did miss that, mea culpa. And I apologize for the condescending tone of previous comment.

For the issue about tokens not resetting on a password change, this is intentional. If you have a lot of devices, it could be a pain to relink/re-sign in on every device just because you change your password. However, if you really do want to reset your tokens, there is an option for that. [image…

@anon18523487 i believe @martinr92 was saying that even checking that box that he was seeing reuse of certain tokens. see post from 6 days ago by him.

What about getting API access via the guest account even if it’s disabled? I seen another post of a user able to sign in to their app via guest even when it’s disabled. Dunno how accurate the post is but might want to look into this…

Please give the source of this statement. Strictly speaking there is no “guest” account. Guest is just a special “managed user” inside your Plex Home. So to “sign in as guest”, you first have to sign in as a regular Plex user account and then later Switch User to the guest account.

[image] Android app can play everything without login 汉语 - Chinese i download plex android app start and select guest continue, app auto find my server in my local network and show all my media directly and when i play some one app ask me to active plex pass ,i select l…

I think this is a totally different matter. I am almost willing to bet that this user has put his whole local home network into “List of IP addresses and networks that are allowed without auth”. And his phone is connected to his home WiFi while doing this. And he is now surprised that this does e…

Plex Server scans for wallets?

Plex Media Server

sixxnet March 18, 2022, 2:11pm 201

Topic		Replies	Views
Plex media server.exe is trying to access your login info in Firefox? Plex Media Server server-windows	36	752	March 9, 2022
Action required: Important notice of a potential data breach General Discussions	412	7389	September 15, 2022
Plex Content Not Authorized Plex Media Server server-windows	38	897	June 24, 2023
Can Plex staff and potenially Big Brother access my files now? General Discussions	66	8577	February 1, 2018
Information related to security Vulnerabilities Plex Media Server server-linux	50	5288	March 27, 2026

Plex Server scans for wallets?

Related topics