CVE-2022-23126

—

CVSS 3.1

9.8 critical

EPSS

2%p82

Published

Jan 24, 2022 (Jan 24, 2022)

Modified

Jun 17, 2026

Description

TeslaMate before 1.25.1 (when using the default Docker configuration) allows attackers to open doors of Tesla vehicles, start Keyless Driving, and interfere with vehicle operation en route. This occurs because an attacker can leverage Grafana login access to obtain a token for Tesla API calls.

Vendors: teslamate
Products: teslamate
Weakness: CWE-287
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.2%)

In the news0 stories

No ingested article mentions this CVE yet.