Govt finds security flaws in Tata Motors' apps; issues 'high-severity' advisory for car owners

The CERT-In flagged four high-severity vulnerabilities in Tata Motors' iRA 2.0 and iRA.ev apps, warning that hackers could access sensitive data, impersonate car owners and make unauthorised changes. The flaws affect older app versions. These apps are connected and designed to add smart features. iRA 2.0 is available for Tata’s internal combustion engine vehicles, while iRA.ev is for EVs.