CVE-2025-14306

Critical

Published: 09/12/2025(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

A directory traversal vulnerability exists in the CacheCleaner component of Robocode version 1.9.3.6. The recursivelyDelete method fails to properly sanitize file paths, allowing attackers to traverse directories and delete arbitrary files on the system. This can be exploited by submitting specially crafted inputs.

Risk Assessment

An attacker can delete critical system files, potentially leading to system crashes or data loss, and compromising application integrity.

Recommendation

Upgrade Robocode to the latest version or apply vendor patches to remediate the vulnerability.

Original NVD description (English source)

A directory traversal vulnerability exists in the CacheCleaner component of Robocode version 1.9.3.6. The recursivelyDelete method fails to properly sanitize file paths, allowing attackers to traverse directories and delete arbitrary files on the system. This vulnerability can be exploited by submitting specially crafted inputs that manipulate the file path, leading to potential unauthorized file deletions. https://robo-code.blogspot.com/