CVE-2025-69415

Publication date

2026-01-02 16:49:36

Family

mitre

State

PUBLISHED

Description

In Plex Media Server (PMS) through 1.42.2.10156, ability to access /myplex/account with a device token is not properly aligned with whether the device is currently associated with an account.