CVE-2020-5741—Plex Media Server Remote Code Execution Vulnerability

Vulnerability Name

Plex Media Server Remote Code Execution Vulnerability

Description

Plex Media Server contains a remote code execution vulnerability that allows an attacker with access to the server administrator's Plex account to upload a malicious file via the Camera Upload feature and have the media server execute it.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:

Unknown

Action

Apply updates per vendor instructions.

Additional Notes

• https://forums.plex.tv/t/security-regarding-cve-2020-5741/586819
• https://nvd.nist.gov/vuln/detail/CVE-2020-5741

Related News Articles

• 300k+ Plex Media Server instances still vulnerable to attack via CVE-2025-34158August 27, 2025
• Plex warns users to patch security vulnerability immediatelyAugust 15, 2025

Related Weaknesses

• CWE-502