CVE-2026-30289: Tinybeans Private Family Album

High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days.

An arbitrary file overwrite vulnerability in Tinybeans Private Family Album App v5.9.5-prod allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

Affected products

• Tinybeans Private Family Album: version 5.9.5 only

Published 2026-04-01. Last modified 2026-06-17.