CVE catalog
CVE-2025-14306
Robocode vulnerabilities
- Severity
- Critical · CVSS 10
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:D/RE:M/U:Red - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 1.07% · Oct 25, 2026
A directory traversal vulnerability exists in the CacheCleaner component of Robocode version 1.9.3.6. The recursivelyDelete method fails to properly sanitize file paths, allowing attackers to traverse directories and delete arbitrary files on the system. This vulnerability can be exploited by submitting specially crafted inputs that manipulate the file path, leading to potential unauthorized file deletions. https://robo-code.blogspot.com/
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | robocode | sid | 1.9.3.9-5 | vulnerable |
| Debian | robocode | forky | 1.9.3.9-5 | vulnerable |
| Debian | robocode | trixie | 1.9.3.9-4 | vulnerable |
| Debian | robocode | bookworm | 1.9.3.9-3 | vulnerable |
| Ubuntu | robocode | noble | Not reported | vulnerable |
| Ubuntu | robocode | noble | 1.9.3.9-3ubuntu0.1~esm1 | fixed |
| Cpe | robocode | Not reported | Not reported | unknown |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | robocode | source | sid | (unfixed) | not yet assigned | Not reported | [1122289] |
| Debian | robocode | source | forky | (unfixed) | not yet assigned | Not reported | [1122289] |
| Debian | robocode | source | trixie | (unfixed) | not yet assigned | Not reported | [1122289] |
| Debian | robocode | source | bookworm | (unfixed) | not yet assigned | Not reported | [1122289] |
| Ubuntu | robocode | deb | noble | 1.9.3.9-3ubuntu0.1~esm1 | Not reported | Not reported | Not reported |
Notes
[trixie] robocode: Minor issue [bookworm] robocode: Minor issue
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [robocode]Affected
Details (2)
1.9.3.9-3· all · bookwormAffected
usn · robocode · debian · bookworm
1.9.3.9-3· all · bookwormAffected
usn · robocode · debian · bookworm
Observed:
References
- [https://nvd.nist.gov/vuln/detail/CVE-2025-14306]
- [https://osv.dev/vulnerability/CVE-2025-14306]
- [https://security-tracker.debian.org/tracker/CVE-2025-14306]
- [https://ubuntu.com/security/notices/USN-8385-1]
[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Ubuntu Security Notices (USN)]