The vulnerability CVE-2025-70994 affects Yadea T5 Electric Bicycles (models from 2024 onward) due to their use of the EV1527 fixed-code RF protocol in the keyless entry system without rolling codes or cryptographic challenge-response mechanisms. This design flaw allows an attacker to capture a legitimate key fob signal and replay it to gain unauthorized vehicle operation. The CVSS 3.1 score is 7.3, reflecting high impact on integrity and availability with attack vector being adjacent network and requiring no privileges but user interaction. There is no vendor advisory or patch available at this time.

An attacker who can intercept a legitimate key fob transmission can perform a replay attack to fully control the affected electric bicycle without authorization. This compromises the integrity and availability of the vehicle, potentially allowing theft or unauthorized use. Confidentiality is not impacted. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should be aware of the risk of replay attacks and consider physical security measures to prevent interception of key fob signals. No official mitigation or temporary fix has been published by the vendor.