CVE-2026-30289 - Vulnerability Analysis

Overview

Tinybeans Private Family Album App v5.9.5-prod contains an arbitrary file overwrite vulnerability caused by improper handling in the file import process, letting attackers overwrite critical internal files, leading to code execution or information exposure, exploit requires attacker to initiate file import.

Severity & Score

Impact

Attackers can overwrite critical files, leading to arbitrary code execution or exposure of sensitive information.

Mitigation

Update to the latest version of Tinybeans Private Family Album App.

References

• https://github.com/Secsys-FDU/AF_CVEs/issues/17
• https://play.google.com/store/apps/details?id=com.tinybeans
• https://secsys.fudan.edu.cn/
• https://tinybeans.com/

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner