CVE-2026-30279 describes an arbitrary file overwrite vulnerability in Squareapps LLC My Location Travel Timeline version 11.80. The vulnerability arises from insufficient validation in the file import process, enabling attackers to overwrite critical internal files. This can result in arbitrary code execution or information disclosure. The issue is categorized under CWE-22, indicating a directory traversal or path traversal weakness. The CVSS v3.1 base score is 8.4, reflecting high impact on confidentiality, integrity, and availability. No official patch or fix is currently documented, and the product is not a cloud service, so remediation depends on vendor updates.

Exploitation of this vulnerability allows an attacker to overwrite critical internal files of the affected application, potentially leading to arbitrary code execution or exposure of sensitive information. This impacts the confidentiality, integrity, and availability of the system running the vulnerable software. The high CVSS score (8.4) indicates a significant risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix is currently available, users should monitor vendor communications for updates. Until a fix is released, avoid importing untrusted files and restrict access to the file import functionality to trusted users only.