CVE-2025-14306
CriticalCVSS 9.1Exploitation Probability (EPSS)
Elevated risk64th percentile - higher than 64% of all known CVEs
Summary
A directory traversal vulnerability exists in the CacheCleaner component of Robocode version 1.9.3.6. The recursivelyDelete method fails to properly sanitize file paths, allowing attackers to traverse directories and delete arbitrary files on the system. This can be exploited by submitting specially crafted inputs.
Risk Assessment
An attacker can delete critical system files, potentially leading to system crashes or data loss, and compromising application integrity.
Recommendation
Upgrade Robocode to the latest version or apply vendor patches to remediate the vulnerability.
Other vulnerabilities in Robocode
See all- CVE-2025-14308Critical
An integer overflow vulnerability exists in the write method of the Buffer class in Robocode version 1.9.3.6. The method fails to properly validate the length of data being written, potentially leading to buffer overflows and arbitrary code execution. Attackers can exploit this by submitting specially crafted inputs.
- CVE-2025-14307High
An insecure temporary file creation vulnerability exists in the AutoExtract component of Robocode version 1.9.3.6. The createTempFile method fails to securely create temporary files, allowing attackers to exploit race conditions.
Original NVD description (English source)
A directory traversal vulnerability exists in the CacheCleaner component of Robocode version 1.9.3.6. The recursivelyDelete method fails to properly sanitize file paths, allowing attackers to traverse directories and delete arbitrary files on the system. This vulnerability can be exploited by submitting specially crafted inputs that manipulate the file path, leading to potential unauthorized file deletions. https://robo-code.blogspot.com/
Vulnerability data from NVD (NIST) · CISA KEV · EPSS