VDB
CVE-2025-14306
CVE-2025-14306
PUBLISHED
CVSS 10 CRITICAL
A directory traversal vulnerability exists in the CacheCleaner component of Robocode version 1.9.3.6. The recursivelyDelete method fails to properly sanitize file paths, allowing attackers to traverse directories and delete arbitrary files on the system. This vulnerability can be exploited by submitting specially crafted inputs that manipulate the file path, leading to potential unauthorized file deletions. https://robo-code.blogspot.com/
EPSS 1.07% · 63.4th percentile
Risk Scores
CVSS 4.0
10
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:Y/R:U/V:D/RE:M/U:Red
EPSS Score
1.07%
63.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| robocode | robocode | 1.9.3.6 |
| Maven | net.sf.robocode:robocode.core | 0 |
| Robocode Project | Robocode | 1.9.3.6 |
Timeline
- May 13, 2025 Fix PR Merged
- Dec 9, 2025 CVE Published
- Dec 9, 2025 EPSS Score
- Dec 9, 2025 PoC Published
- Dec 14, 2025 EPSS Score
- Dec 18, 2025 EPSS Score
- Dec 23, 2025 EPSS Score
- Dec 27, 2025 EPSS Score
- Jan 1, 2026 EPSS Score
- Jan 6, 2026 EPSS Score
- Jan 10, 2026 EPSS Score
- Jan 15, 2026 EPSS Score