Plex, a popular media management platform, is urging its users to update their software immediately after several security flaws were discovered. The company has a history of directly contacting affected users to ensure they apply the latest patches. For Plex Media Server, users are advised to update to version 1.43.3, while Plex Desktop users should upgrade to version 1.115.0. However, Plex has not yet disclosed details about the vulnerabilities, such as their severity, potential risks, or whether they have been exploited in real-world attacks. The company has requested CVE identifiers—standardized codes used to identify known security flaws—and promises to provide more information once they are assigned. According to Censys, a cybersecurity research group, over 364,000 devices globally are running Plex Media Server and are accessible over the internet. However, not all of these devices are vulnerable, as the search does not account for the specific version of the software installed. Plex is actively reaching out to users through direct email alerts, emphasizing the urgency of applying updates. For users running Plex on network-attached storage (NAS) devices, the company recommends manually installing the latest version if the device’s package manager has not yet updated. On Linux systems, there is a delay in the Flatpak distribution, with Flathub still offering an older version of Plex Desktop (1.112.0), while Plex officially recommends version 1.115.0. An employee responding on Plex’s community forum confirmed that the team is working on the update. This is not the first time Plex has taken such urgent action. In August 2025, the company directly contacted users affected by a previously undocumented vulnerability. That flaw, later labeled CVE-2025-34158, was rated 8.5 out of 10 in severity on the CVSS scale. It allowed attackers with limited access to steal authentication tokens, granting them control over the server. This past incident underscores the importance of promptly applying software updates to mitigate potential risks. Plex’s current push for updates highlights the ongoing challenge of maintaining secure software in a rapidly evolving digital landscape. While the company has not yet disclosed specifics about the current vulnerabilities, its proactive approach aligns with best practices in cybersecurity. Users are encouraged to check for updates regularly, especially for software that handles sensitive data or is accessible over the internet.