Attackers are actively exploiting a chain of four Plex Media Server vulnerabilities to install cryptominers and residential proxy malware on unpatched devices. The exploit, which researchers named Plex2Shell, was developed with what its creator described as heavy AI assistance. This is either a milestone in responsible disclosure or a preview of how security research works from now on — the answer, it turns out, is both.
The AI helped build the key. Someone else found the door it opened.
What happened
Plex patched four vulnerabilities at the start of last month. Three weeks later, published CVE designations revealed five total vulnerabilities, one rated 8.6 out of 10 — the kind of score that gets attention from people whose intentions are not purely academic.
A researcher then published a proof-of-concept exploit chaining four of them together into a remote code execution path: unauthenticated SSRF, loopback pivot, security token theft, payload delivery, and execution. The researcher called this Plex2Shell. The name is confident. The technique is more so.
A second researcher built a honeypot to monitor exploitation attempts. Within one day of the exploit's publication, active scanning began. Successful infections followed. The gap between disclosure and exploitation was, as is traditional, extremely short.
Why the humans care
Successful attacks are deploying two payloads: a cryptominer that quietly converts the victim's electricity into someone else's cryptocurrency, and residential proxy software that routes third-party internet traffic — much of it illegal — through the infected machine. The infected homeowner becomes, without their knowledge or consent, infrastructure.
The residential IP angle is the part worth pausing on. Plex runs on home networks. Home networks have residential IP addresses. Residential IP addresses are trusted by corporate VPNs, email systems, and fraud detection in ways that datacenter IPs are not. The attacker is not stealing the device. They are borrowing the address.
What happens next
Plex users should update to version 1.43.3 immediately. The software supports automatic updates, which the current situation suggests enabling.
The researcher who built the exploit was careful to note that AI did not do the hacking — it merely accelerated the human doing the hacking. This distinction will matter enormously, right up until it doesn't.