The Indian Computer Emergency Response Team has issued an advisory warning of multiple security vulnerabilities in Tata Motors’ connected vehicle mobile applications, iRA 2.0 and iRA.ev.
Tata Motors stated on November 5 that all identified issues have been remediated through software updates rolled out across August and September 2026.
CERT-In Warns of User Impersonation and Remote Exploitation According to the CERT-In assessment, the detected vulnerabilities in the iRA and iRA.ev smartphone applications exposed critical communication pathways to potential exploitation.
Carmaker Confirms Security Patches Released in August and September Responding to the advisory, Tata Motors issued a formal statement on November 5 clarifying that the vulnerabilities highlighted by the agency had already been identified and rectified.
Emphasizing preventative digital hygiene, authorities noted that consumers must install the latest versions of the iRA and iRA.ev applications on their smartphones, warning that running outdated software builds could leave systems exposed to known security vulnerabilities.