Insecure Temporary File Creation in AutoExtract Component of Robocode

CVE-2025-14307

What is CVE-2025-14307?

The AutoExtract component of Robocode version 1.9.3.6 is susceptible to an insecure temporary file creation flaw. This vulnerability arises from the createTempFile method failing to securely generate temporary files. By exploiting race conditions, an attacker could potentially execute arbitrary code or overwrite critical files on the system. Manipulation of the temporary file creation process allows unauthorized actions, making it essential for users to address this vulnerability promptly to secure their installations.

References