6.1 Medium

CVE-2026-35254 Vulnerability in the Oracle OCI CLI product of Oracle Open Source Projects

Description

Vulnerability in the Oracle OCI CLI product of Oracle Open Source Projects. The supported versions that is affected is 3.77. Easily exploitable vulnerability allows unauthenticated attacker with network access to compromise Oracle OCI CLI. Successful attacks of this vulnerability can result in Oracle OCI CLI allowing users to place imported files outside the intended directory.

Affected products and versions

Product	Affected versions	Fixed in
Oracle OCI CLI of Oracle Open Source Projects	3.77.0	No fix stated

Do you use Oracle OCI CLI of Oracle Open Source Projects?

Track this CVE Watch Oracle OCI CLI of Oracle Open Source Projects Check my SBOMs

www.cveye.io/en/cve/CVE-2026-35254

Timeline

Published May 6, 2026
Last modified May 6, 2026

References

Oracle Advisory www.oracle.com

Track this CVE