| Package | Affected versions | Patched versions |
|---|---|---|
| media server | ≤ 1.43.0.10389 |
In the plex.tv backend for Plex Media Server (PMS) through 2025-12-31, a non-server device token can retrieve share tokens (intended for unrelated access) via a shared_servers endpoint.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free