Directory Traversal Vulnerability in Robocode by Robo-Code

CVE-2025-14306

What is CVE-2025-14306?

A significant directory traversal vulnerability exists in the CacheCleaner component of Robocode version 1.9.3.6. The flawed implementation of the recursivelyDelete method does not sanitize file paths adequately, enabling an attacker to manipulate inputs to traverse directories and potentially delete arbitrary files on the system. By exploiting this vulnerability, malicious actors can execute unauthorized file deletions, posing serious risks to the integrity and availability of the system. Immediate action is recommended to mitigate this risk.

References