Vulnerability in the Oracle OCI CLI product of Oracle Open Source Projects. The supported versions that is affected is 3.77. Easily exploitable vulnerability allows unauthenticated attacker with network access to compromise Oracle OCI CLI. Successful attacks of this vulnerability can result in Oracle OCI CLI allowing users to place imported files outside the intended directory.
References
| Link | Resource |
|---|---|
| https://www.oracle.com/security-alerts/all-oracle-cves-outside-other-oracle-public-documents.html | Not Applicable |
Configurations
History
06 May 2026, 20:30
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Oracle cloud Infrastructure Cli
Oracle |
|
| CPE | cpe:2.3:a:oracle:cloud_infrastructure_cli:3.77:*:*:*:*:*:*:* | |
| References | () https://www.oracle.com/security-alerts/all-oracle-cves-outside-other-oracle-public-documents.html - Not Applicable |
06 May 2026, 14:16
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-22 |
06 May 2026, 08:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-06 08:16
Updated : 2026-06-17 10:40
NVD link : CVE-2026-35254
Mitre link : CVE-2026-35254
CVE.ORG link : CVE-2026-35254
JSON object : View
Products Affected
oracle
- cloud_infrastructure_cli
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')