PT-2026-52700 · Jetbrains · Kotlin

Published

2026-06-26

·

Updated

2026-06-26

·

CVE-2026-53914

CVSS v3.1

6.7

Medium

VectorAV:L/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:L
In JetBrains Kotlin before 2.4.20 code execution was possible via unsafe deserialization in the build cache metadata

Fix

Deserialization of Untrusted Data

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2026-53914

Affected Products

Kotlin