Description
Plex Media Server (PMS) through 1.42.2.10156 allows retrieval of a permanent access token via a /myplex/account call with a transient access token.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Plex | Media Server | ≤ 1.42.2.10156 | — |
High · 8.5
CVE-2025-69414
EUVD-2026-0047GHSA-7wq8-6p4v-xx2g
Plex Media Server (PMS) through 1.42.2.10156 allows retrieval of a permanent access token via a /myplex/account call with a transient acces…
Published Jan 2, 2026 · Updated Jan 2, 2026 · Assigned by mitre