VULNERABILITY INTELLIGENCE

CVE-2025-14306

CVSS score9.1 CRITICAL
EPSS probability1.07%
CISA KEVNot currently listed
Published2025-12-09
Last modified2026-10-15
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Description

A directory traversal vulnerability exists in the CacheCleaner component of Robocode version 1.9.3.6. The recursivelyDelete method fails to properly sanitize file paths, allowing attackers to traverse directories and delete arbitrary files on the system. This vulnerability can be exploited by submitting specially crafted inputs that manipulate the file path, leading to potential unauthorized file deletions. https://robo-code.blogspot.com/

Weakness classification

  • cve_disclosure@tech.gov.sg: CWE-22

Primary references