How I Got Acknowledged by My Dream Car Lamborghini Which Falls Under Audi OOOO & Volkswagen Group 🏎️🔐

March 3, 2026 4 min read Utsavpari Gosai

Hello Hackers 👨‍💻🔐

Blog Image

I hope you all are doing well and continuing to secure our digital landscape 🌍✨

Today, I am excited to share how I discovered a security vulnerability in my dream car brand, Lamborghini 🏎️💨 and how their team fixed it and acknowledged my responsible disclosure.

🔍 The Discovery

During my research, I identified two endpoints that were leaking backend information. This issue fell under:

  • ⚠️ Information Disclosure
  • ⚙️ Security Misconfiguration

These endpoints were exposing backend details that should not have been publicly accessible. After verifying the issue carefully, I prepared a responsible disclosure report.

🏢 Reporting Process

Lamborghini is a subsidiary of Audi, and Audi’s parent company is Volkswagen Group. Volkswagen Group owns brands such as Audi, Lamborghini, Bentley, and Ducati.

I initially checked Bugcrowd to report the issue to Volkswagen. However, their bug bounty program was limited to volkswagen.com only and did not include Audi or Lamborghini.

Therefore, I directly contacted the Lamborghini IT/security team and responsibly disclosed the vulnerability.

✅ Resolution & Acknowledgment

After a few weeks, their team responded and fixed the issue by restricting the vulnerable endpoints with a 403 Forbidden response 🚫

Blog Image
Blog Image

I also received an acknowledgment from the Lamborghini team, which was truly an amazing feeling especially coming from my dream car brand 🏎️🔥

Blog Image

🛠️ Tips for Finding Similar Issues

  • 🔎 Use targeted wordlists based on backend technologies.
  • 🤖 Utilize tools like Nuclei scanner for automated detection.
  • 🧩 Use Wappalyzer to identify technologies used by the target.
  • 🧠 Combine automated scanning with manual testing.

The combination of automation and manual analysis significantly increases the chances of finding valid and impactful vulnerabilities.

🛡️ Responsible Disclosure

Always follow ethical hacking principles. Report vulnerabilities responsibly and never exploit them for personal gain. Our goal is to make the digital ecosystem safer for everyone 🌍🔐

🙏 Gratitude

I would like to thank my best friend K3$#!V@ 🤝 and my idol Lord Shiva 🕉️ for their constant motivation and support.

If you have any questions or queries, feel free to reach out via my Linktree.

Thank You,
MR. X FACTOR 🚀

🔗 Handles:

← Back To Homepage