Unless there's a bug where jellyfin or plex decides to execute a random exe it tries to index, exploitation seems unlikely.