Imperfect Security in Indian Motorcycle Scout Bobber and Tech 2025 Model

CVE-2026-49325

What is CVE-2026-49325?

A vulnerability in the bike-shutdown control system of the Indian Motorcycle Scout Bobber and Tech 2025 model allows an attacker to exploit the communication between the Wireless Control Module (WCM) and the Engine Control Unit (ECU). This flaw permits a physical attacker with access to the WCM wiring harness to bypass the anti-theft shutdown mechanism, rendering the motorcycle operable without the rider's PIN. The issue arises from the receiving ECU's inability to differentiate between a legitimate shutdown signal and an open-circuit condition, enabling unauthorized control over the motorcycle.

References