CVE-2025-69414: Plex Media Server

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Plex Media Server (PMS) through 1.42.2.10156 allows retrieval of a permanent access token via a /myplex/account call with a transient access token.

Affected products

• Plex Media Server: up to and including 1.42.2.10156

Published 2026-01-02. Last modified 2026-10-07.