05-Nov-2026 10:46:14
CERT-In Flags High-Severity Security Flaws in Tata Motors Apps, Warns of Possible Hacker Impersonation
India’s cybersecurity agency CERT-In has flagged four high-severity vulnerabilities in Tata Motors’ iRA 2.0 and iRA.ev connected-car applications that could allow hackers to access sensitive credentials, impersonate vehicle owners and gain unauthorised access to vehicle-related services. The flaws involve hardcoded credentials, insecure configurations, exposed authentication tokens and improper SSL certificate protection. Affected versions include iRA 2.0 (26.7.3 and below) and iRA.ev (26.7.2 and below). Users have been advised to update their apps immediately.