# Vulnerability **URL:** \ **Category:** Plex Media Server\ **Tags:** server-windows\ **Created:** [December 7, 2021, 9:17pm UTC](https://forums.plex.tv/t/vulnerability/762913 "2021-12-07T21:17:01Z")\ **Posts on this page:** 1\ **Showing post:** 1
**Author:** ![plex\_jfr.im](https://avatars.discourse-cdn.com/v4/letter/p/e274bd/32.png) [@plex\_jfr.im](https://forums.plex.tv/u/plex_jfr.im)\ **Post date:** [December 7, 2021, 9:17pm UTC](https://forums.plex.tv/t/vulnerability/762913/1 "2021-12-07T21:17:02Z")
> [@Security: Regarding CVE-2021-42835](https://forums.plex.tv/t/security-regarding-cve-2021-42835/761510): > > Hello, We have recently been made aware of a security vulnerability in Plex Media Server versions prior to 1.25.0 that could allow a local Windows user to obtain administrator privileges without authorization. To be clear, this required the user to already have local, physical access to the computer (just with a different user account on Windows). There are no indications that this exploit could be used from a remote machine. This issue has been assigned [CVE-2021-42835](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42835). Plex Media Server vers… That’s not a disclosure. That’s a non-info. All you say is the same thing the changelog said and neither of them have any useful info for an administrator to see if they might have been attacked in the past, nor to see if your fix missed something since we both know Plex never fixes anything. Who reported the vulnerability, and when will further details be disclosed? --- _[View the full topic](https://forums.plex.tv/t/vulnerability/762913)._