CVE-2025-34251 Tesla Telematics Control Unit (TCU) < v2025.14 Authentication Bypass
An attacker with physical access can bypass authentication to execute arbitrary code with root privileges via ADB on Tesla TCU devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-34251?
CVE-2025-34251 is a high-severity authentication bypass vulnerability in Tesla Telematics Control Unit (TCU), published on 6 Oct 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Tesla Telematics Control Unit (TCU) firmware prior to v2025.14 contains an authentication bypass vulnerability. The TCU runs the Android Debug Bridge (adbd) as root and, despite a “lockdown” check that disables adb shell, still permits adb push/pull and adb forward. Because adbd is privileged and the device’s USB port is exposed externally, an attacker with physical access can write an arbitrary file to a writable location and then overwrite the kernel’s uevent_helper or /proc/sys/kernel/hotplug entries via ADB, causing the script to be executed with root privileges.
Which versions are affected by CVE-2025-34251?
How do I fix CVE-2025-34251?
No fix has been published for CVE-2025-34251 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2025-34251 being exploited?
There is no known exploitation of CVE-2025-34251 in the wild and no public exploit code.
Sources
Also known as GHSA-jvpj-w5q8-mg28.