What is CVE-2025-14306?

CVE-2025-14306 is a critical-severity vulnerability in Robocode, classified under Path Traversal. CVSS score: 9.1/10. Published 2025-12-09.

How severe is CVE-2025-14306?

Critical severity. CVSS v3 base score is 9.1 out of 10.

Path Traversal in Robocode

CVE-2025-14306

A directory traversal vulnerability exists in the CacheCleaner component of Robocode version 1.9.3.6. The recursivelyDelete method fails to properly sanitize file paths, allowing attackers to traverse directories and delete arbitrary files…

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.009 (55.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H.

Affected products

Robocode — versions 1.9.3.6
Robocode Project — versions 1.9.3.6

Weakness classification (CWE)

CWE-22 — Path Traversal

References

cve_disclosure@tech.gov.sg (Issue Tracking, Vendor Advisory)
af854a3a-2127-422b-91ae-364da2661108

Frequently asked questions

What is CVE-2025-14306?: CVE-2025-14306 is a critical-severity vulnerability in Robocode, classified under Path Traversal. CVSS score: 9.1/10. Published 2025-12-09.
How severe is CVE-2025-14306?: Critical severity. CVSS v3 base score is 9.1 out of 10.