high7.1
CVE-2025-69415
In Plex Media Server (PMS) through 1.42.2.10156, ability to access /myplex/account with a device token is not properly aligned with whether the device is curre…
Impact
In Plex Media Server (PMS) through 1.42.2.10156, ability to access /myplex/account with a device token is not properly aligned with whether the device is currently associated with an account.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Plex | Media Server | through 1.42.2.10156 |