CVE-2020-5740: Plex Media Server

High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Improper Input Validation in Plex Media Server on Windows allows a local, unauthenticated attacker to execute arbitrary Python code with SYSTEM privileges.

Affected products

• Plex Media Server: before 1.19.1.2701 (fixed in 1.19.1.2701)

Published 2020-04-22. Last modified 2026-06-17.