CVE-2026-35254 is a vulnerability in the Oracle OCI CLI product version 3.77 that allows an unauthenticated attacker with network access to place imported files outside the intended directory. This flaw could lead to unauthorized file placement, impacting the integrity of the system. The vulnerability has a CVSS 3.1 base score of 6.1, indicating a medium severity level.