VULNERABILITY INTELLIGENCE

CVE-2026-35020

CISA KEVNot currently listed
Published2026-04-06
Last modified2026-05-29

Description

Rejected reason: This CVE ID has been rejected by the its CVE Numbering Authority (CNA). It was determined that the attack requires an attacker to already control arbitrary environment variables, a level of access they consider functionally equivalent to code execution and outside the threat model of CLI tools.