CVE-2026-121146

The iRA 2.0 and iRA.ev mobile applications by Tata Motors are vulnerable to an information disclosure flaw due to the recording of authentication tokens in application logs intended for development and debugging. A local attacker with access to these logs can retrieve and misuse the exposed sessi...