Hacker ApprovedDepartments

Plex Media Server

Ranked 5 of 5 media servers by recommenders

Lets you stream your own music and video to any device, with automatic metadata and easy sharing with invited users. Critics cite security flaws and a history of bugs.

Lets you stream your own music and video to any device, with automatic metadata and easy sharing with invited users. Critics cite security flaws and a history of bugs.

28 people gave an opinion

recommend it
15
criticize it
13
approval share
54%
Each figure is one person. RecommendsCriticizes

Recommended in 8 of 13 months

  1. November 2025: recommended
  2. December 2025: recommended
  3. January 2026: recommended
  4. February 2026: not recommended
  5. March 2026: not recommended
  6. April 2026: not recommended
  7. May 2026: recommended
  8. June 2026: recommended
  9. July 2026: recommended
  10. August 2026: not recommended
  11. September 2026: recommended
  12. October 2026: recommended
  13. November 2026: not recommended (month in progress)

Why it doesn’t carry the badge

  • 15 people recommend itNeeds 10 or more, met.
  • 1.1 recommenders for every criticNeeds 2 to 1 or better, not met.
  • Recommended in 8 of 13 monthsNeeds 4 or more, met.

The same three rules apply to every product, and the badge can’t be bought. How the badge works

What people say about it

The reasons people give, with the number of comments that give each one. Open a reason to read what they said.

Why people recommend it

Each mark is one comment

  • Automatic metadata, seamless experience

    “Excellent automatic metadata determination.”

    Comment from 19 May 2026 in “Plex's 200% Lifetime Pass price hike tries forcing users to another subscription”

    “It's a very seamless experience.”

    Comment from 7 Jan 2026 in “State of the Fin 2026-01-06 – Jellyfin”

What people warn about

Each mark is one comment

  • Security flaws and bugs

    “Plex trusts anything from loopback, so any SSRF is effectively an auth bypass.”

    Comment from 17 Oct 2026 in “Plex Media Server Unauth RCE Exploit”

    “Plex Media Server has had a relatively small but consequential CVE history.”

    Comment from 20 Oct 2026 in “Plex vulnerabilities being exploited in the wild to drop a cryptominer”

    “Some of those individual bugs are egregious.”

    Comment from 17 Oct 2026 in “Plex Media Server Unauth RCE Exploit”
  • Tricky setup and settings

    “they do not make this an easy setting to change! I have set this multiple times according to docs, and it worked only once ever”

    Comment from 8 Sep 2026 in “Jellyfin 12.0”

    “it does need some tech literacy to setup properly”

    Comment from 24 Jul 2026 in “The Corporate Creep of Plex: Why it may be time to move to Jellyfin”
  • Slow transcoding and performance

    “My Plex media server is ancient and it really struggles if it has to do any kind of transcoding.”

    Comment from 11 Mar 2026 in “FFmpeg-over-IP – Connect to remote FFmpeg servers”

    “For some reason, out of the box this was dog slow.”

    Comment from 11 Jan 2026 in “I dumped Windows 11 for Linux, and you should too”

Other media servers people recommend

The four most recommended other media servers, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.

Plex Media Server compared with 4 alternatives
ProductRecommendCriticizeApprovalMonthsOwnedBadge
Jellyfin38513374%131 yr28 ownersApproved
Plex21921850%1310 yrs42 owners—
Emby201557%9——
Audiobookshelf17194%9—Approved
Plex Media ServerThis page151354%8——
See all 5 media servers, ranked

What people said

26 of the 28 comments that mention it, newest first. Each links to the original comment.

“Plex Media Server has had a relatively small but consequential CVE history.”

CriticizesComment from 20 Oct 2026 in “Plex vulnerabilities being exploited in the wild to drop a cryptominer”

“they look like actively made misguided choices”

CriticizesComment from 19 Oct 2026 in “Plex vulnerabilities being exploited in the wild to drop a cryptominer”

“it's a questionable/clunky implementation but possible”

CriticizesComment from 19 Oct 2026 in “Plex vulnerabilities being exploited in the wild to drop a cryptominer”

“I completely missed their "please upgrade now" email on Sep 1st and was running a 13 month old version.”

CriticizesComment from 19 Oct 2026 in “Plex vulnerabilities being exploited in the wild to drop a cryptominer”

“It is designed to be on the network so that many different invited users can all log in and access your media.”

MixedComment from 19 Oct 2026 in “Plex vulnerabilities being exploited in the wild to drop a cryptominer”

“their Synology package doesn't auto update itself”

CriticizesComment from 19 Oct 2026 in “Plex vulnerabilities being exploited in the wild to drop a cryptominer”

“it's authenticated, so there's nothing terrifying about exposing it”

MixedComment from 19 Oct 2026 in “Plex vulnerabilities being exploited in the wild to drop a cryptominer”

“Plex trusts anything from loopback, so any SSRF is effectively an auth bypass.”

CriticizesComment from 17 Oct 2026 in “Plex Media Server Unauth RCE Exploit”

“Some of those individual bugs are egregious.”

CriticizesComment from 17 Oct 2026 in “Plex Media Server Unauth RCE Exploit”

“they do not make this an easy setting to change! I have set this multiple times according to docs, and it worked only once ever”

CriticizesComment from 8 Sep 2026 in “Jellyfin 12.0”

“For now, I am happy on plex/plexamp.”

RecommendsComment from 8 Sep 2026 in “Jellyfin 12.0”

“I currently have 10Tb of 1080p content and rescans takes a few seconds.”

RecommendsComment from 24 Jul 2026 in “The Corporate Creep of Plex: Why it may be time to move to Jellyfin”

“it does need some tech literacy to setup properly”

MixedComment from 24 Jul 2026 in “The Corporate Creep of Plex: Why it may be time to move to Jellyfin”

“I probably would. Or just go for the cheaper route of paying them monthly/yearly”

RecommendsComment from 21 Jul 2026 in “Jellyfin founder Andrew leaves team”

“I bought a NAS instead and start running a plex server.”

RecommendsComment from 2 Jun 2026 in “The Pirate Bay Remains Resilient, 20 Years After the Raid”

“Excellent automatic metadata determination.”

RecommendsComment from 19 May 2026 in “Plex's 200% Lifetime Pass price hike tries forcing users to another subscription”

“discovered that plex won't even run now without a pass”

CriticizesComment from 19 May 2026 in “New Lifetime Plex Pass Pricing”

“back when Plex supported plugins all your plugin had to do was eventually give it a link to a video / stream”

CriticizesComment from 8 Apr 2026 in “Show HN: I pipe free sports streams into Jellyfin – no ads, just HLS”

“My Plex media server is ancient and it really struggles if it has to do any kind of transcoding.”

CriticizesComment from 11 Mar 2026 in “FFmpeg-over-IP – Connect to remote FFmpeg servers”

“For some reason, out of the box this was dog slow.”

CriticizesComment from 11 Jan 2026 in “I dumped Windows 11 for Linux, and you should too”

“It's a very seamless experience.”

RecommendsComment from 7 Jan 2026 in “State of the Fin 2026-01-06 – Jellyfin”

“Plex has the weakness of requiring a first time online auth because they didnt implement a local ldap/oauth/sso pathway”

MixedComment from 6 Jan 2026 in “State of the Fin 2026-01-06 – Jellyfin”

“There's no reason IMO for that to be necessary.”

CriticizesComment from 6 Jan 2026 in “State of the Fin 2026-01-06 – Jellyfin”

“Only if you want it to. Your local Plex server is always available on port 32400”

RecommendsComment from 29 Dec 2025 in “Self-hosting is being enshittified”

“I use it pretty heavily as a local plex server for music and videos”

MixedComment from 26 Dec 2025 in “What tech purchase did you regret even though reviews were great?”

“backed by Plex Media Server, is the pinnacle of music discovery”

RecommendsComment from 8 Nov 2025 in “Apple is crossing a Steve Jobs red line”

Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.