CVE-2026-30289 is an arbitrary file overwrite vulnerability in Tinybeans Private Family Album App version 5.9.5-prod. The vulnerability allows attackers to overwrite critical internal files through the file import process. This can lead to arbitrary code execution or information exposure. The vulnerability affects the mobile application used for private family photo sharing. The issue represents a significant security risk given the potential for code execution and data exposure.