PT-2025-49805 · Robocode+1 · Robocode+1

[e-mail] · Published 2025-01-01 · Updated 2026-06-04 · CVE-2025-14306

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:Y/R:U/V:D/RE:M/U:Red

Name of the Vulnerable Software and Affected Versions Robocode version 1.9.3.6

Description A directory traversal issue exists in the CacheCleaner component. The recursivelyDelete method does not properly sanitize file paths, potentially allowing attackers to traverse directories and delete arbitrary files on the system. This can be exploited by submitting specially crafted inputs that manipulate the file path, leading to unauthorized file deletions.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the CacheCleaner component or disabling it until a patch is available.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-14306

GHSA-J8R2-47RX-QHW4

USN-8385-1

Affected Products

Debian

Robocode

References · 19

• https://github.com/robo-code/robocode/pull/67 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8385-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-14306 · Security Note
• https://osv.dev/vulnerability/USN-8385-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-14306 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-14306 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-14306 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-10648 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-14307 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-14306 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-14306 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-14306 · Security Note
• https://ubuntu.com/security/CVE-2025-14308 · Vendor Advisory
• https://github.com/robo-code/robocode/commit/26b6ba8ed5b2a11a646ce2d5da8d42cd53574b1f · Note
• https://twitter.com/0dayPublishing/status/1998292863075963162 · Twitter Post