Carlelo logo

Tata Motors Fixes Security Issues in iRA and iRA.ev Apps After CERT-In Alert

Published ByKonica Singh
|
calendar
Follow us on:
youtubefacebookwhatsappinstagramgoogle news
Tata Motors Fixes Security Issues in iRA and iRA.ev Apps After CERT-In Alert

CERT-In flagged high-severity vulnerabilities in Tata's connected car apps. Tata Motors rolled out updated versions of iRA 2.0 and iRA.ev. The company says there is no evidence of customer data being compromised.

Tata Motors has addressed security vulnerabilities in its iRA 2.0 and iRA.ev connected car apps following an alert from the Indian Computer Emergency Response Team (CERT-In). The company says it has rolled out mandatory software updates and additional security measures to fix the issues. The alert was issued on November 4, 2026, and classified the vulnerabilities as high severity. These issues could potentially allow attackers to access sensitive credentials or vehicle-related information and services.

 

Which Tata Motors Apps Were Affected?

 

According to the security alert, the affected versions were iRA 2.0 version 26.7.3 and earlier, along with iRA.ev version 26.7.2 and earlier. These apps offer connected car features such as remote vehicle functions, vehicle status updates and trip information. They are available across several Tata Motors models, including the Curvv, Nexon, Harrier EV and Sierra EV, among others.

 

Also Read: Volkswagen Virtus Facelift Gets Its First Official Look

 

Tata Motors Rolls Out Mandatory Software Updates

 

Tata Motors says it has released updated versions of both apps to address the reported vulnerabilities. The updated iRA 2.0 version is 26.8.2, while the iRA.ev app has been updated to version 26.9.1. The updates were rolled out in August and September 2026, respectively, through over-the-air software updates. Users are prompted to install the latest versions when they open the apps. The company has also confirmed that the update rollout has been completed for all active users. It is contacting the remaining customers to ensure they update their apps.

 

Tata Motors Says No Customer Data Was Compromised

 

Tata Motors has stated that it has found no evidence of unauthorised access or compromise of customer credentials, personal information or vehicle-related data. The company also said it continues to monitor its connected car systems and is working with CERT-In to maintain security across its digital services. Owners using the iRA 2.0 and iRA.ev apps should check that they are running the latest versions to ensure they have the security fixes.

About Author

Konica Singh

Konica Singh

Sub-Editor

preferred source publisher

Konica Singh is a passionate Automotive Journalist who brings the world of cars to life, from EV trends to exciting new car launches. Backed by 7 years in content creation, she is skilled in writing, editing, and SEO strategy that drives engagement.


Education: MA English (Delhi University)


Social Media: LinkedIn | Instagram | Twitter | Facebook


Email: konica.carlelo@gmail.com


Location: New Delhi

Trending Car News in India

Follow us on
FacebookInstagramLinkedinYoutubeTwitter
Carlelo Logo