Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Gradle 7.6.1 can let attackers run code

published 1 month ago

Summary

The Gradle build tool version 7.6.1 contains a flaw that could allow an attacker to execute their own code while a project is being built. This could compromise the systems that run the builds. Upgrade to a newer Gradle release as soon as possible to close the risk.

What to do

Update cleanstart gradle to version 7.6.1-r0.

Affected software

Ecosystem	Vendor	Product	Affected versions
CleanStart	cleanstart	gradle	< 7.6.1-r0 Fix: upgrade to 7.6.1-r0

Original advisory text

Security fix for CVE-2023-26053 applied in: gradle 7.6.1-r0

Security vulnerability affects the gradle package. This issue is resolved in later releases. See references for vulnerability details.

References

https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advis... Vendor Advisory
https://osv.dev/vulnerability/CVE-2023-26053 URL
https://nvd.nist.gov/vuln/detail/CVE-2023-26053 URL

Timeline

Published18 Sep 2026

Updated18 Sep 2026

First seen18 Sep 2026

Sources

CLEANSTART-2026-UI97459 · OSV

Track software like this

Free during beta