Tata Motors Passenger Vehicles said the company has addressed vulnerabilities identified in its iRA 2.0 and iRA.ev applications through software updates and enhanced security measures, according to a report by PTI..
The statement follows warnings issued by the Indian Computer Emergency Response Team (CERT-In) flagging multiple high-severity vulnerabilities that could potentially allow attackers to steal sensitive credentials and gain unauthorized access to vehicle information.
The flagged issues affected Tata Motors iRA 2.0 versions 26.7.3 and below, as well as iRA.ev versions 26.7.2 and below.
In response to the advisory, mandatory updates were rolled out over the air, upgrading iRA 2.0 to version 26.8.2 in August 2026 and iRA.ev to version 26.9.1 in September 2026. The update rollout has been completed for all active users, and the company is reaching out to remaining customers who are yet to complete the updates.
The company spokesperson noted that internal assessments found no evidence of any unauthorized access to or compromise of customer credentials, personal information, or vehicle-related data. Tata Motors stated that it continues to actively monitor its systems to maintain the security and protection of its customers.