Researcher takes over every account and vehicle fleet on the My Eicher platform

Sources: Eaton Works, HN 49070756
Summary: A write-up published 2026-07-27 by Eaton Works describes a single critical flaw in My Eicher, the fleet-management platform of the Volvo and Eicher commercial-vehicle joint venture. The researcher reports reaching account takeover across the platform's whole user base and the vehicles registered behind those accounts. My Eicher is a hosted platform with no user-visible build version, so affected-version information does not apply, and no vendor fix confirmation is published. The disclosure timeline and the vendor's remediation are not restated here.
Why it matters: One authorization defect in a multi-tenant telematics API escalating to fleet-wide control is the failure mode teams building vehicle and fleet platforms design against.
Follow-up: Watch for a vendor statement, a fix confirmation, and any CVE assignment.