CVE-2026-35255 is a vulnerability in the Oracle Cloud Native Environment Command Line Interface (CLI) version 2.3.2. It allows an unauthenticated attacker to execute arbitrary code by exploiting a malicious environment variable. The vulnerability has a CVSS v3.1 base score of 6.6, indicating medium severity. No public exploit or known exploitation in the wild has been reported. Oracle has not published a public patch or advisory beyond listing the issue in their open source project references.