CVE-2026-53914
1 advisory.
Maven/org.jetbrains.kotlin:kotlin-gradle-plugin CVE-2026-53914: medium 6.7
JetBrains Kotlin: Unsafe Deserialization in Kotlin Build Cache Enables Code Execution
Action: Upgrade org.jetbrains.kotlin:kotlin-gradle-plugin to 2.4.20-Beta1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.4.20-Beta1 | - |
Fixed versions
| 2.4.20-Beta1 |
Sources
- osv: GHSA-r937-wjx7-w2jp
- https://nvd.nist.gov/vuln/detail/CVE-2026-53914
- https://github.com/JetBrains/kotlin/commit/bf51df665b458fda7c3eaf436c4d88dc119d7ec6
- https://github.com/JetBrains/kotlin
- https://github.com/JetBrains/kotlin/releases/tag/v2.4.20-Beta1
- https://www.jetbrains.com/privacy-security/issues-fixed
CVE-2026-53914 · published · modified · JSON