PT-2026-1109

CVE-2025-69415

·

Published

2026-01-02

·

Updated

2026-02-27

Description by

CVSS 3.1
7.1
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Name of the Vulnerable Software and Affected Versions Plex Media Server versions prior to 1.42.2.10157
Description Plex Media Server (PMS) has an issue where access to the /myplex/account endpoint with a device token is not correctly linked to the device's account association status. This could allow unauthorized access.
Recommendations Update Plex Media Server to version 1.42.2.10157 or later.
Exploitability
Exploit
Fix
Vendors
Affected products
Weakness enumeration
CWE-672: Operation on a Resource after Expiration or Release
Related identifiers
CVE-2025-69415
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com