Plex 1.43.3 patches exploited SSRF-to-RCE chain discovered via AI-assisted mapping

The published proof-of-concept chains four steps: unauthenticated SSRF to reach internal services, loopback pivot for token extraction, authenticated payload delivery, and remote execution. The researcher documented iterative LLM use for component mapping and verification loops rather than end-to-end automation. Plex issued the fix without public CVE assignment or detailed advisory at disclosure time.

Active exploitation began before the 1.43.3 release, targeting exposed instances on port 32400. Historical Plex incidents show repeated exposure of media metadata and user tokens when servers face the public internet. The current chain bypasses default authentication when remote access remains enabled.

Operational impact centers on servers left reachable without reverse proxies or local-only binding. Organizations running Plex at scale must audit exposure logs for anomalous SSRF patterns and enforce automatic updates. Manual patching remains necessary for air-gapped or custom deployments.

Future risk rises if similar AI-guided chaining targets other media servers exposing internal APIs. Monitoring for unexpected outbound callbacks from Plex processes provides the earliest detection signal.