CVE-2025-69415: Plex Media Server

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

In Plex Media Server (PMS) through 1.42.2.10156, ability to access /myplex/account with a device token is not properly aligned with whether the device is currently associated with an account.

Affected products

• Plex Media Server: up to and including 1.42.2.10156

Published 2026-01-02. Last modified 2026-10-07.