Security Advisory

CVE-2025-34158

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-08-21 13:43:30

Last updated 2026-01-02 15:56:59

Assigner mitre

CVSS score 8.5

State PUBLISHED

Description

Plex Media Server (PMS) 1.41.7.x through 1.42.0.x before 1.42.1 is affected by incorrect resource transfer between spheres because /myplex/account provides the credentials of the server owner (and a /api/resources call reveals other servers accessible by that server owner).

← Browse all CVEs View on cve.org ↗