CVE-2026-53914

Fixed upstream EPSS <1%CVSS 6.7

In JetBrains Kotlin before 2.4.20 code execution was possible via unsafe deserialization in the build cache metadata

Published 2026-06-26 · CVE record · OSV

Fixed upstream

Ecosystem	Package	Fixed in
Maven	org.jetbrains.kotlin:kotlin-gradle-plugin	2.4.20-Beta1