PT-2025-49806 · Robocode+1 · Robocode+1

[e-mail] · Published 2025-01-01 · Updated 2026-06-04 · CVE-2025-14307

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:Y/R:U/V:D/RE:M/U:Red

Name of the Vulnerable Software and Affected Versions Robocode version 1.9.3.6

Description An insecure temporary file creation issue exists in the AutoExtract component. The createTempFile method does not securely create temporary files, potentially allowing attackers to exploit race conditions. This could lead to arbitrary code execution or overwriting critical files by manipulating the temporary file creation process.

Recommendations Restrict permissions related to temporary file creation. Monitor for suspicious activity related to temporary file operations. Isolate affected environments.

Fix

Weakness Enumeration

CWE-377

Related Identifiers

CVE-2025-14307

GHSA-2MXR-RC97-XRJ2

USN-8385-1

Affected Products

Debian

Robocode

References · 20

• https://github.com/robo-code/robocode/pull/68 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-14306 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-14307 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-14307 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-14308 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-10648 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-14307 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8385-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-14307 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-14307 · Security Note
• https://osv.dev/vulnerability/GHSA-2mxr-rc97-xrj2 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-14307 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-14307 · Security Note
• https://ubuntu.com/security/notices/USN-8385-1 · Vendor Advisory
• https://github.com/robo-code/robocode/commit/9f882bba2a9cd91da57c16b98699f8cc9b354f3a · Note