CVE-2025-14307criticalCWE-377

CVE-2025-14307: critical vulnerability in Robocode

Insecure Temporary File Creation in Robocode's AutoExtract Component

Published

Follow this CVE+ Monitor Robocode+ Monitor robocode

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.3epss 0.3%
An insecure temporary file creation vulnerability exists in the AutoExtract component of Robocode version 1.9.3.6. The createTempFile method fails to securely create temporary files, allowing attackers to exploit race conditions and potentially execute arbitrary code or overwrite critical files. This vulnerability can be exploited by manipulating the temporary file creation process, leading to potential unauthorized actions.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:Y/R:U/V:D/RE:M/U:Red
Affected products
Robocode Project · Robocode
Related CVEs — Robocode

In the same product, most dangerous first.

CVE-2025-14306CRITICALDirectory Traversal in Robocode's CacheCleaner ComponentEPSS 1.1%CVE-2025-14308CRITICALInteger Overflow in Robocode's Buffer Write MethodEPSS 0.6%