Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-14306

32
FAUCET Score

CVE-2025-14306 is a critical directory traversal vulnerability affecting the CacheCleaner component of Robocode version 1.9.3.6. This flaw allows an unauthenticated attacker to delete arbitrary files on the system by submitting specially crafted inputs that bypass file path sanitization. With a CVSS score of 9.1 (CRITICAL) and a FAUCET Risk Score of 97/100, the vulnerability is easily exploitable over the network with low attack complexity, leading to high impact on integrity and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with 10 mentions, indicating awareness and potential for future exploitation.

Impacted Technologies

VendorProductVersion(s)CPE
1.9.3.6CPE matchmatch criteria
cpe:2.3:a:robocode:robocode:1.9.3.6:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 4.0

10.0CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:D/RE:M/U:Red

Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
NONE
VS Confidentiality
HIGH
VS Integrity
HIGH
VS Availability
HIGH
SS Confidentiality
HIGH
SS Integrity
HIGH
SS Availability
HIGH
Exploit Maturity
NOT_DEFINED
CvssVersion
4.0

Exploit Intelligence

EPSS Score
0.93%
Probability of exploitation in next 30 days
EPSS Percentile
57.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0093 is in the 42nd percentile among its peer group of 36,862 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

mavenpatch availablevia ghsa
Product: net.sf.robocode:robocode.coreFixed in: 1.9.5.6
github_advisoryvendor investigatingvia nvd_reference
View patch

Vendor Advisories (1)

mavenGHSA-j8r2-47rx-qhw4critical

Robocode vulnerable to Directory Traversal in recursivelyDelete Method

Dec 9, 2025

References

github.com / robo-code/robocode/commit/26b6ba8ed5b2a11a646ce2d5da8d42cd53574b1f
github.com / robo-code/robocode/pull/67
Issue TrackingVendor Advisory