CVE-2026-35377 is a logic error in the env utility of uutils coreutils that causes improper input validation when using the -S (split-string) option. The utility incorrectly rejects valid escape sequences that GNU env accepts, resulting in an 'invalid sequence' error and process termination with exit status 125. This behavior breaks compatibility with scripts relying on standard split-string semantics, causing a local denial of service.