GHSA-prxj-3gcv-cqrh Tesla Fleet Telemetry allows spoofing telemetry for arbitrary vehicles via compromised vehicle credentials
Attackers with compromised vehicle credentials can spoof telemetry data for arbitrary vehicles, compromising data integrity in Tesla's cloud service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is GHSA-prxj-3gcv-cqrh?
GHSA-prxj-3gcv-cqrh is an authentication bypass vulnerability in github.com/teslamotors/fleet-telemetry, published on 1 Apr 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Summary
A vulnerability in vehicle authentication allows threat actor with valid client credentials (i.e., a private key and certificate from a rooted infotainment system) to impersonate arbitrary VINs when authenticating to the telemetry server.
Impact
The attacker would be able to submit falsified telemetry records for arbitrary VINs.
Which versions are affected by GHSA-prxj-3gcv-cqrh?
3 open source packages ship an affected version, including github.com/teslamotors/fleet-telemetry.
| Package | Affected | Fixed in |
|---|---|---|
github.com/teslamotors/fleet-telemetry Go | All versions | 0.9.0 |
github.com/teslamotors/fleet-telemetry Go | All versions | 0.9.0 |
github.com/teslamotors/fleet-telemetry Go | All versions | 0.9.0 |
How do I fix GHSA-prxj-3gcv-cqrh?
Upgrade github.com/teslamotors/fleet-telemetry to 0.9.0 or later.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is GHSA-prxj-3gcv-cqrh being exploited?
There is no known exploitation of GHSA-prxj-3gcv-cqrh in the wild and no public exploit code.
Sources
Also known as GO-2026-5553.