Plex urges users to update after patching serious security flaws

Published Sep 5, 2026, 12:20 PM EDT Patrick O'Rourke is XDA's News Editor and Entertainment Segment Lead. Previously, he was Pocket-lint's Editor-in-Chief, the Editor-in-Chief of Canadian tech publication MobileSyrup, and earlier in his career, he worked as the technology editor at the Financial Post and Postmedia. He's based in Toronto. Over the past 15 years, he's written thousands of articles. Patrick has also interviewed dozens of tech industry executives and covered GDC, E3, Gamescom, WWDC, Apple keynotes, Samsung Unpacked events and more. Patrick has a BA in journalism from Toronto Metropolitan University. Sign in to your XDA account Summary Plex is asking users to install version 1.43.3 of its server and version 1.115.0 of its desktop app to patch undisclosed security flaws. Plex has emailed affected users; NAS owners might need to install updates manually. A 2025 high-severity authentication bug exposed admin tokens. Plex is asking users to update both their app and media server after releasing an update that patches several security flaws. The fixes are available in Plex Media Server 1.43.3 (released on May 19th) and Plex Desktop 1.115.0 (released on August 13th). Both updates can be downloaded from Plex's official downloads page. Surprisingly, the self-hosted streaming platform hasn't revealed what those security issues actually were. Plex even went so far as to email users running affected versions of Plex's media server and desktop app. "We recommend all server owners and Desktop users update to the latest version as soon as possible," writes Plex in an announcement from earlier this week. "If you're running Plex Media Server on a NAS device, the updated version may not be available in their package manager yet, but you can install the package manually." This isn't the first time Plex has uncovered a notable vulnerability The streaming app recently rolled back major design changes with its streaming device app According to The Hacker News, in August 2025, Plex addressed a high-severity security flaw related to an authentication bug stemming from the "'/myplex/account' endpoint incorrectly exposing the server owner's account details, including their administrative access token, even when accessed by any authenticated non-owner or lower-privileged user." In other Plex-related news, the self-hosted media streaming app recently brought back the collapsible side navigation panel UI with its Apple TV, Roku, Android TV, and Fire TV app. Additionally, a few months ago, the platform raised the price of its popular lifetime Plex Pass from $250 to $750, prompting an uproar from longtime users.