CVE-2025-14307: Robocode has an insecure temporary file creation vulnerability in the AutoExtract component
An insecure temporary file creation vulnerability exists in the AutoExtract component of Robocode version 1.9.3.6. The createTempFile method fails to securely create temporary files, allowing attackers to exploit race conditions and potentially execute arbitrary code or overwrite critical files.
Published Dec 9, 2025 · Updated Dec 10, 2025
Affected packages
net.sf.robocode:robocode.battle
- Ecosystem
- Maven
- Affected
- < 1.9.5.6
- Fixed in
- 1.9.5.6
- Check
mvn dependency:tree -Dincludes=net.sf.robocode:robocode.battle
Advisory details
From the GitHub Advisory Database (CC BY 4.0).
An insecure temporary file creation vulnerability exists in the AutoExtract component of Robocode version 1.9.3.6. The createTempFile method fails to securely create temporary files, allowing attackers to exploit race conditions and potentially execute arbitrary code or overwrite critical files. This vulnerability can be exploited by manipulating the temporary file creation process, leading to potential unauthorized actions.
References
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology