Connected Vehicles Face Growing Software Security Risks
Owners of modern vehicles should update software and limit third-party data permissions to protect against security flaws.
Updated on Oct. 21, 2026 in Auto Parts
Live Poll
Do you trust the security of your vehicle's smart features and connected data?
Recent research covering January 2022 to September 2024 has identified 413 software vulnerabilities in modern connected vehicles, with external applications now accounting for over one-third of these security risks. These vulnerabilities present potential privacy concerns for vehicle owners, such as the December 2024 discovery that location data for 800,000 Volkswagen Group vehicles was accessible online.
Why it matters
As vehicles increasingly rely on software to communicate with cloud services and smartphones for navigation, they face growing digital security risks from third-party libraries. These breaches can expose private owner information or, in severe cases, impact essential vehicle control systems.
Researchers classified 45 percent of the 413 identified software vulnerabilities as high severity and 16 percent as critical, a significant increase from the 5 percent critical rate seen in earlier studies. These weaknesses frequently stem from third-party software libraries integrated during development.
The players
Volkswagen Group
A major global automaker that produces vehicles ranging from economy hatchbacks to luxury SUVs and has faced recent data security challenges.
Jeep
An American automotive brand known for SUVs that was the subject of high-profile remote-hacking demonstrations in 2015.
The details
Vulnerabilities often enter automotive systems through unsecured third-party software libraries or misconfigured cloud credentials. In the recent Volkswagen Group incident, attackers exploited unsecured Amazon Web Services credentials held by a third-party vendor to access vehicle location data. Historically, researchers have also demonstrated the ability to remotely interfere with vehicle steering, brakes, and accelerators by exploiting these connectivity channels.
Timeline
2015: Researchers remotely interfered with Jeep Cherokee controls.
January 2022 to September 2024: Study period for software vulnerability research.
December 2024: Volkswagen Group vehicle location data found accessible online.
The Home Front
The rise of connected vehicle vulnerabilities follows the industry-wide shift toward software-defined vehicles, where digital connectivity has become a standard feature rather than an optional add-on. This trend underscores a growing convergence between consumer household technology and automotive security requirements.
Vehicle owners should regularly review the privacy settings within their car's infotainment system to limit what location data is shared with third-party applications. Ensure your vehicle's software is kept updated by the manufacturer to receive the latest security patches.
The takeaway
Vehicle connectivity now brings the same security responsibilities as managing a home computer or smartphone. Owners should prioritize enabling two-factor authentication for any manufacturer-linked mobile apps and review account permissions for third-party services connected to their vehicle.
Further reading
Learn more about the latest developments in Auto Parts.
Live Poll
Do you trust the security of your vehicle's smart features and connected data?
