high8.5
CVE-2025-69414
Plex Media Server (PMS) through 1.42.2.10156 allows retrieval of a permanent access token via a /myplex/account call with a transient access token.
Impact
Plex Media Server (PMS) through 1.42.2.10156 allows retrieval of a permanent access token via a /myplex/account call with a transient access token.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Plex | Media Server | through 1.42.2.10156 |