Plex Vulnerability

[instant_es]

Update to 1.43.3.10861+ ASAP before your server gets taken over. Full server compromise exploit is now public:

ZM

[veeejay]

Folks are starting to get hit by it:

https://www.reddit.com/r/PleX/s/LilsCZahFh

https://www.reddit.com/r/PlexMedia/s/gLWcTOmEAA

https://www.reddit.com/r/PlexMedia/s/MxIuE3DDKd

The original announcement about it:

Important Security Update for Plex Media Server v1.43.2 and earlier

We recently released Plex Media Server 1.43.3 and Plex Desktop 1.115.0 to address a number of security issues. We recommend all server owners and Desktop users update to the latest version as soon as possible. CVEs have been requested and we’ll reply to this thread with more details once they’re published. If you’re running Plex Media Server on a NAS device, the updated version may not be available in their package manager yet but you can install the package manually. Here’s a quick guide on ho…

[woyciesjes]

And old vulnerability. This is why auto-update is a good thing to do.