Robocode Insecure Temporary File Creation Vulnerability in AutoExtract Component

Vulnerability

A vulnerability allowing insecure temporary file creation has been identified in the AutoExtract component of Robocode version 1.9.3.6. The issue arises because the createTempFile method does not securely generate temporary files, which can lead to race condition exploitation. This vulnerability may allow attackers to execute arbitrary code or overwrite critical files by manipulating the temporary file creation process, potentially leading to unauthorized actions.

Impact

Exploitation of this vulnerability could allow for arbitrary code execution or overwriting of critical files.

Remediation

Users can update to the latest version of Robocode, where this vulnerability has been fixed, to address this issue.

Added: Dec 9, 2025, 8:44 PM
Updated: Dec 9, 2025, 8:44 PM

Vulnerability Rating

Custom Algorithm
spread
4.2
impact
10.0
exploitability
4.2
remediation
7.7
relevance
1.4
threat
6.4
urgency
10.0
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.