High severity7.1NVD Advisory· Published Jan 2, 2026· Updated Oct 7, 2026
CVE-2025-69415
CVE-2025-69415
Description
In Plex Media Server (PMS) through 1.42.2.10156, ability to access /myplex/account with a device token is not properly aligned with whether the device is currently associated with an account.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
30+ 1 more
- (no CPE)range: 0
- cpe:2.3:a:plex:media_server:*:*:*:*:*:*:*:*range: <=1.42.2.10156
- Range: <=1.42.2.10156
Patches
Vulnerability mechanics
References
1- github.com/lufinkey/vulnerability-research/blob/main/CVE-2025-34158/README.mdnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.