Osegi
Security·1 min read

CERT-In Flags Security Flaws in Tata Motors Connected Car Apps

India's cyber agency CERT-In has warned of vulnerabilities in certain versions of Tata Motors' connected vehicle apps used by petrol, diesel and electric car owners.

A Tata Motors connected car app open on a smartphone beside a vehicle dashboard, with a security warning symbol.
Image: YourStory

India's national cybersecurity agency CERT-In has issued a warning about security vulnerabilities in Tata Motors' connected vehicle apps. The flaws affect specific versions of the apps used by owners of both internal combustion engine (ICE) and electric vehicles (EV).

What is known

The advisory covers particular app versions rather than every release, which means only users running the affected builds are exposed. The material available so far does not detail the technical nature of the flaws, how severe they are, or whether any of them have been exploited in the wild.

Why it matters

Connected vehicle apps sit between a driver's smartphone and the car. They commonly handle account access and vehicle-related features, so weaknesses in them can raise privacy and safety concerns. The warning adds to growing attention on cybersecurity risks in connected vehicles, a category that is expanding quickly as manufacturers add app-based services to ICE and electric models alike.

For owners, the practical step is to check which version of the app they are using and to install any update that Tata Motors releases. Users should also rely only on official app stores for downloads.

What comes next

The key open questions are whether Tata Motors will publish fixed versions and how it will communicate with affected customers. Details on the specific vulnerabilities and the affected version numbers are likely to matter most for owners deciding whether to update immediately.

Apps worth a look

SUMO: the number puzzle

Tap the right tiles, add them up, hit the target. Easy to learn, hard to master. Free, for all ages.

Tags:tata motorscert-inconnected carsvulnerabilitiesevcybersecurity

More from this day

See all →

More in: Security

See all →