CVE-2025-69415 | Plex Media Server up to 1.42.2.10156 Device Token /myplex/account operation after expiration

January 2, 2026 Yanac

A vulnerability has been found in Plex Media Server up to 1.42.2.10156 and classified as problematic. The affected element is an unknown function of the file /myplex/account of the component Device Token Handler. This manipulation causes operation on a resource after expiration.

This vulnerability appears as CVE-2025-69415. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More