CVE-2025-14307 - CVE House
Back to Database
Status published Critical CVE-2025-14307

Insecure Temporary File Creation in Robocode's AutoExtract Component

Vulnerability Description

An insecure temporary file creation vulnerability exists in the AutoExtract component of Robocode version 1.9.3.6. The createTempFile method fails to securely create temporary files, allowing attackers to exploit race conditions and potentially execute arbitrary code or overwrite critical files. This vulnerability can be exploited by manipulating the temporary file creation process, leading to potential unauthorized actions.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-14307

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • titancaproject@gmail.com

References

More from Robocode Project

View All →
CVE-2025-14308
Integer Overflow in Robocode's Buffer Write Method
Critical 10
CVE-2025-14306
Directory Traversal in Robocode's CacheCleaner Component
Critical 10

Affected Vendor

Robocode Project

View all reports →

Affected Software

Robocode
Vulnerable Versions:
1.9.3.6

Timeline

Official Publish: December 9th, 2025
Last Modified: December 9th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-377

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.