Plex vulnerabilities exploited to drop cryptominer
The gist
Attackers exploited four Plex Media Server flaws to install a cryptominer within a day of details going public.
Server owners on version 1.43.2 or earlier should update to the fixed build.
How it unfolded
- Jul 27, 2026The Plex2Shell vulnerabilities were reported to Plex.
- Aug 4, 2026Plex acknowledged the report, awarded a bug bounty, and the fixed build became publicly available the same day.
- Sep 1, 2026Plex posted a public security advisory and emailed users on older versions, recommending all server owners and Desktop users update.