Jetbrains Kotlin — CVE-2026-53914 (Critical)

Date Jun 26, 2026
Type Vendor advisory
Signal Critical vendor advisory
Vendor / Product Jetbrains · Kotlin
CVE CVE-2026-53914
Critical vendor advisory CVE-2026-53914

Summary

In JetBrains Kotlin before 2.4.20 code execution was possible via unsafe deserialization in the build cache metadata

Why it matters

This CVE carries a CRITICAL severity rating (CVSS 6.7) in Jetbrains Kotlin. Patch or mitigate promptly. EPSS percentile: 2%.

Operator check

Review CVE-2026-53914 in your asset inventory. Apply patches per vendor guidance and verify Kotlin is not exposed. CVSS score: 6.7. EPSS probability: 0.1%; percentile: 2%.

Sources

PatchBrief uses public sources. It does not scan environments, verify exposure, or replace vendor guidance.