Plex, a popular media streaming platform, has recently been the subject of reports regarding vulnerabilities that allow attackers to deploy cryptominers on user systems. These incidents primarily affect users who expose their Plex servers to the public internet—a common configuration for those who wish to share their media libraries with friends and family across different networks. The discussion highlights that while the software is designed for external accessibility, this inherent openness can be leveraged by malicious actors to gain unauthorized access.
Technical details shared in the discussion suggest that the exploits target older versions of the software. One user reported being compromised while running a version that was 13 months old, noting that they had missed a security update notification from September. The resulting infection manifested as a process named "mylovelyminer" consuming 100% of the server's resources. Other participants noted that the specific vulnerabilities were patched in August, emphasizing the importance of maintaining up-to-date software to mitigate these risks.
Beyond the specific vulnerability mentioned, some users reported similar incidents of cryptomining on their systems even while running updated versions of Plex. These cases may point to broader system vulnerabilities or different, unpatched flaws. The conversation also touched on the trade-offs of using Plex; while it offers a convenient way to stream media without complex VPN setups, it requires a higher trust threshold than more isolated configurations. Some users expressed a desire for more robust automatic updates to ensure that security patches are applied promptly to prevent such exploits.