Plex Urges Users to Quickly Update Server and Desktop App
Plex fixed undisclosed security issues in Media Server and the Plex Desktop app. The company recommends switching to the new versions as soon as possible.
Plex security update delivers fixes for several as-yet-unspecified issues in Plex Media Server and the desktop app. On September 1, the company recommended that server owners and Plex Desktop users install the current releases without unnecessary delay.
Plex security update: Which versions need to be installed
The notice concerns Plex Media Server version 1.43.2 and earlier. The fixes are included in Plex Media Server 1.43.3. For the desktop client, Plex lists Plex Desktop 1.115.0.
The company did not specify which versions of Plex Desktop are affected by the vulnerabilities. It has also not yet disclosed the nature of the flaws, their number, or their severity rating. Without this information, it is not possible to reliably determine the potential consequences of possible exploitation.
Plex has also requested the assignment of CVE identifiers. It promised to publish technical details only after they are assigned.
NAS devices may require manual installation
Operators of Plex Media Server on NAS devices may not find the fixed package immediately in their system’s package manager. Plex warns that, in such cases, the update can be installed manually.
The practical procedure therefore depends on the platform used: verify the server version, update Plex Media Server to version 1.43.3, and update the desktop app to version 1.115.0. For NAS deployments, users should monitor package availability from the device manufacturer or use a manual update according to Plex’s instructions.
Active exploitation has not been confirmed
Plex did not confirm in its notice that any of the fixed flaws are being actively exploited. Technical details that would make it possible to assess whether the issue affects specific configurations or ways of using the server are also not publicly available.
However, the manufacturer’s urgent recommendation means administrators do not have to wait for CVE records or a more detailed analysis. The update is already available for Plex Media Server and Plex Desktop.
What to watch next
- the assignment of CVE identifiers and subsequent technical information from Plex,
- any confirmation or denial of active exploitation,
- the availability of updated NAS packages in manufacturers’ management interfaces.
Sources
- Plex Forum – Plex’s official notice about the fixed security issues, recommended versions, and pending CVEs.
- BleepingComputer – Independent confirmation of the urgent update recommendation and the lack of public technical details.
Verified and updated: 04. 09. 2026 10:56
