LOS ANGELES, Sept. 8 — Plex is urging users to update their desktop clients and media servers immediately after releasing patches for multiple security vulnerabilities that affect older versions of its software. The company asked customers running Plex Media Server v1.43.2 and earlier to upgrade without delay, noting that the flaws have not yet been assigned CVE IDs for tracking. Plex also emailed users on affected versions directly, asking them to update as soon as possible to address the security issues.
“We recently released Plex Media Server 1.43.3 and Plex Desktop 1.115.0 to address a number of security issues. We recommend all server owners and Desktop users update to the latest version as soon as possible,” the company said.
“CVEs have been requested and we’ll reply to this thread with more details once they’re published. If you’re running Plex Media Server on a NAS device, the updated version may not be available in their package manager yet but you can install the package manually.” The patched versions — Plex Media Server 1.43.3, released in May, and Plex Desktop 1.115.0, released in August — can be downloaded from the official downloads page or the server management page.
While Plex has not shared details about the vulnerabilities so far, the company’s decision to email customers directly marks one of the few times it has taken that step for a specific security issue. For families across the region running Plex on network-attached storage devices, the update path may require a manual install if the NAS vendor’s package manager has not yet picked up the new release.
Plex acknowledged this gap and pointed users to manual installation options. The company has patched critical security flaws in the past, but this week’s advisory stands out for the urgency of its messaging. Users on affected versions should treat the update as a priority — the longer a system runs unpatched, the more exposed it remains while the security community waits for CVE details to be published.
What to watch next: Plex has promised to reply to its advisory thread with more details once the CVEs are published. Until then, server owners and desktop users alike should check their version numbers and update if they are running anything older than the patched releases.
