Plex flaws exploited to install malware on unpatched servers

Researchers have seen active exploitation of Plex Media Server vulnerabilities, with successful attacks installing malware on unpatched devices. The activity makes updating urgent for Plex users, especially those whose servers can be reached over the internet.

Plex fixed four vulnerabilities last month; later disclosures identified five, including one rated 8.6 out of 10. An exploit chain called Plex2Shell combines four flaws to gain remote code execution, and observed payloads include a cryptocurrency miner and residential proxy software. Plex users should update to version 1.43.3 and secure any internet-facing server with measures such as a reverse proxy, trusted apps and strong passwords.