Plex Media Server Plex Media Server

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in Plex Media Server.

By the Year

In 2026 there have been 0 vulnerabilities in Plex Media Server. Plex Media Server did not have any published security vulnerabilities last year.

Year Vulnerabilities Average Score
2026 0 0.00
2025 0 0.00
2024 0 0.00
2023 0 0.00
2022 0 0.00
2021 0 0.00
2020 0 0.00
2019 1 0.00

It may take a day or so for new Plex Media Server vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Plex Media Server Security Vulnerabilities

Tautulli versions 2.1.38 and below
CVE-2018-21031 - November 18, 2019

Tautulli versions 2.1.38 and below allows remote attackers to bypass intended access control in Plex Media Server because the X-Plex-Token is mishandled and can be retrieved from Tautulli. NOTE: Initially, this id was associated with Plex Media Server 1.18.2.2029-36236cc4c as the affected product and version. Further research indicated that Tautulli is the correct affected product.

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for Plex Media Server or by Plex? Click the Watch button to subscribe.

Plex
Vendor

subscribe