What’s Vulnerable › Vulnerabilities

CVE-2025-14306: Directory Traversal in Robocode's CacheCleaner Component

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-09 · updated 2026-10-15
• Weakness: CWE-22

Description

A directory traversal vulnerability exists in the CacheCleaner component of Robocode version 1.9.3.6. The recursivelyDelete method fails to properly sanitize file paths, allowing attackers to traverse directories and delete arbitrary files on the system. This vulnerability can be exploited by submitting specially crafted inputs that manipulate the file path, leading to potential unauthorized file deletions. https://robo-code.blogspot.com/

Affected products

• Robocode Project Robocode: 1.9.3.6

References

• https://github.com/robo-code/robocode/pull/67
• https://github.com/robo-code/robocode/commit/26b6ba8ed5b2a11a646ce2d5da8d42cd53574b1f

Get alerted when CVE-2025-14306 or the next vulnerability affects your stack