How citations work on this page: Every superscript number (e.g., 1) links to the Primary Source Directory at the bottom of this page, where you'll find the direct URL to the official federal regulation, NHTSA recall report, manufacturer technical service bulletin, or engineering standard behind the claim.
Why It Isn't a Random Glitch
Older cars connected the gas pedal to the throttle body with a physical steel cable — press the pedal, and a mechanical linkage pulled the throttle plate open by the same amount, every time. That direct connection was simple, but it also made it impossible for engineers to coordinate the throttle with fuel economy targets, traction control, or cruise control.9The industry replaced it with Drive-by-Wire — an architecture in which a pedal-position sensor reports how far the driver's foot has moved, and a computer decides how far to open the throttle in response.
Severing that physical link raised a new problem: if a wire frays or a sensor drifts, the computer has no mechanical fallback to fall back on. It cannot simply let the cable keep working while it sorts out the fault, because there is no cable. So the engine's computer — the Powertrain Control Module (PCM) or Engine Control Module (ECM) — was built to respond to any unresolved sensor conflict, communication error, or component failure the same way: intentionally throttle back the engine's output until the vehicle can be steered safely to the shoulder. Engineers call this Failure Mode Effective Management, or more informally, “limp-home mode.” It is a deliberate fail-safe, not a malfunction.
Federal regulators reinforced this logic directly. Following a wave of highly publicized unintended- acceleration incidents in the late 2000s, the National Highway Traffic Safety Administration expanded its scrutiny of electronic throttle systems and standardized Brake-Throttle Override across the U.S. market under Federal Motor Vehicle Safety Standard No. 124.1 Under that rule, if the computer detects the brake pedal firmly depressed while the accelerator is also commanding power, it must cut engine torque instantly — mechanical stopping power always outranks an electronic request for acceleration.1That single override is one of several triggers capable of producing the exact same “Reduced Engine Power” message you see for a failed sensor.
The Three-Layer Safety Architecture Behind the Warning
Torque control — the computer's ability to command how much power the engine produces — is classified under ISO 26262, the international “Road Vehicles — Functional Safety” standard, as an ASIL C or ASIL D function: the two highest Automotive Safety Integrity Levels, reserved for failures that could cause severe or fatal injury.4 To satisfy that classification, Robert Bosch GmbH and the EGAS (Electronic Gas Pedal) working group developed a three-layer software architecture that has since become the industry standard across gasoline and diesel engines alike.5 Each layer polices the one below it, so no single software bug or hardware fault can command uncontrolled engine power.
The EGAS Three-Layer Monitoring Concept
| Layer | Role | Fail-Safe Trigger |
|---|---|---|
| Level 1 — Functional | Reads pedal input and commands the throttle, injectors, and ignition timing to produce torque. | None — cannot police itself. |
| Level 2 — Function Monitoring | Independently calculates a “permissible torque” ceiling and compares it to the actual torque Level 1 is generating. | If actual torque exceeds permissible torque, forcibly cuts fuel, disables ignition, and closes the throttle. |
| Level 3 — Controller Monitoring | An independent hardware watchdog that sends arithmetic queries to the main processor to verify it is still computing correctly. | If the processor answers incorrectly or times out, resets the ECM and cuts throttle motor power. |
Source: EGAS monitoring concept, filed with NHTSA docket NHTSA-2014-0108.5
This is why a single chafed wire can produce the exact same dashboard message as a cracked cylinder head: if a short circuit falsely commands full throttle, Level 2 recognizes within milliseconds that the driver's foot never moved, flags the mismatch, stores a diagnostic code, and drops the vehicle into reduced power — regardless of which physical component actually failed.4
How the Car Detects a Problem: Dual-Sensor Correlation
Because the pedal-to-throttle link is entirely electronic, the two components that carry it — the Accelerator Pedal Position (APP) sensor and the Throttle Position (TP) sensor — are never built with a single point of failure. Each one contains two separate internal sensing circuits running on offset voltage scales.9,10As the driver presses the pedal, Sensor A's voltage might climb from 0.5V to 4.5V while Sensor B climbs from 0.25V to 2.25V — exactly half of Sensor A's value at every point in the pedal's travel. The computer checks that the two readings correlate mathematically, dozens of times per second.
A healthy connector holds that correlation steady for the life of the car. A failing one doesn't. If corrosion or a chafed wire lets the two voltages drift apart by more than roughly 10 percent for even a fraction of a second, the computer cannot determine which sensor is telling the truth about the driver's intent — so it assumes both are unreliable, sets a correlation fault, and cuts power rather than guess.10This single failure mode generates two of the most common diagnostic trouble codes tied to the “Reduced Engine Power” message: P2138 for the pedal sensor circuit and P2135 for the throttle sensor circuit.10
What Actually Happens Inside the Engine
Once a fault trips the fail-safe, the computer has two nearly instantaneous tools for cutting power, and it typically uses both together. First, it drops the fuel injector pulse width to zero on alternating cylinders, starving those cylinders of the fuel needed to make full torque. Second, it retards ignition timing — firing the spark plug later in the piston's stroke, closer to or even past top dead center, so the expanding combustion gases have far less mechanical leverage to push the piston down.9 Together, these two moves sap the engine of power within a single combustion cycle, even if the throttle plate itself is stuck wide open.
Simultaneously, the computer cuts the electrical current driving the throttle body's motor. Without that current holding it open, heavy mechanical return springs inside the throttle body snap the butterfly plate almost shut — but not completely. The springs' resting position holds the plate open at a narrow, fixed angle, typically between 6.5 and 7 degrees, letting in just enough unmetered air to keep the engine idling without stalling in traffic.11With the throttle locked at that default angle, the computer manages the car's speed entirely by cutting fuel and timing, capping most vehicles at roughly 20 to 30 mph regardless of how hard the driver presses the pedal.11
Once limp mode engages, the throttle plate doesn't close all the way — mechanical return springs hold it open at roughly 6.5 to 7 degrees, just enough air to idle, while the computer caps road speed at about 20 to 30 mph regardless of pedal input.11
Drivers whose sluggishness comes with a rough idle, a hesitation, or a shudder under acceleration — rather than a flat, capped-speed feel with no shaking — should also read our companion report on why a car jerks when accelerating, since misfire-related faults can trigger both symptoms from the same underlying cause.
When the Transmission Triggers It
Reduced engine power isn't always about the throttle. Modern automatic transmissions share a Controller Area Network (CAN) data bus with the engine computer, and the Transmission Control Module (TCM) can request its own torque reduction. If the TCM detects a failing speed sensor, low hydraulic fluid pressure, or a slipping clutch pack — a condition that generates heat fast enough to cook the transmission fluid and destroy the internal clutch packs — it commands maximum line pressure to stop the slip and locks the transmission into a single, safe gear, usually second or third.9
With the transmission locked in one gear, the engine computer simultaneously restricts RPM — often to a ceiling of 2,500 to 3,000 — to prevent the driver from over-revving an engine that can no longer shift up to slow its rotation at highway speed.9The result feels identical to a throttle-side fault from the driver's seat: a car that won't accelerate past a fixed point. Anyone diagnosing a reduced-power message alongside signs of fluid loss should also read our report on why transmission fluid leaks, since low fluid pressure is one of the specific triggers that forces this transmission-side fail-safe.
Fail-Safe Cooling and Overheating
A severe coolant loss can warp an aluminum cylinder head and destroy an engine block within minutes, and a standard liquid coolant temperature sensor becomes useless the moment the coolant that surrounds it drains away. Ford addressed that blind spot with Fail-Safe Cooling, a system built around a solid-state Cylinder Head Temperature (CHT) sensor bored directly into the metal of the cylinder head, so it keeps reading the engine's actual thermal load even with an empty radiator.9
When the CHT sensor detects an impending overheat, the computer intervenes in three escalating stages. First, the temperature gauge pegs to “Hot,” the check engine light illuminates, diagnostic trouble code P1299 is stored, and the “Reduced Engine Power” message appears.9 Second, the computer disables fuel injectors on alternating cylinders — those cylinders stop combusting and instead pump cool ambient air straight through, turning part of the engine into an air-cooling pump.9 Third, if the driver ignores the warning and cylinder head temperature keeps climbing toward a point where internal metal could begin to melt, the computer disables every injector and intentionally stalls the engine to save it from permanent damage.9
Diesel Trucks: The Regulatory DEF Derate Schedule
Heavy-duty diesel trucks carry an additional, legally mandated reason for reduced power that has nothing to do with hardware failure. Since 2010, the EPA has required diesel engines to use Selective Catalytic Reduction, which injects Diesel Exhaust Fluid (DEF) — a 32.5% urea solution — into the exhaust stream to break down nitrogen oxide emissions.9 Because a truck can run perfectly well without DEF, the EPA codified strict inducement rules under 40 CFR § 1036.111 requiring the engine to progressively cripple its own performance if the DEF tank runs dry or the emissions sensors are tampered with.12
EPA DEF Inducement Schedule
| Phase | Trigger Window | Restriction |
|---|---|---|
| Initial Warning | 0–10 hours (or up to 650 miles) after fault detection | No performance impact — dashboard warnings and audible chimes only. |
| First Derate | 10–80 hours (up to 4,200 miles) of continued operation | Engine torque electronically restricted by 15%–30%. |
| Final Inducement | After 160 hours (or 10,500 miles) | Vehicle speed governed to 25 mph until DEF is refilled or the fault is repaired and cleared. |
Source: 40 CFR § 1036.111 inducement provisions;12 EPA guidance on DEF-related derates.13
That 25 mph final-stage ceiling is itself the product of a regulatory correction. Fleet operators and trucking-industry press documented years of trucks stranded on active highways by a Final Inducement speed limit of just 5 mph — a low enough speed to invite a rear-end collision from highway traffic.14 Subsequent EPA guidance extended the DEF-fault grace periods and raised that final speed ceiling to the current 25 mph, giving a driver enough speed to exit the highway safely rather than crawling along the shoulder.13
Manufacturer Defects Behind the Warning
The fail-safe logic above operates exactly as designed. The initial trigger, however, is frequently a hardware defect or a software calibration error the manufacturer never intended. NHTSA recall reports and technical service bulletins document several specific, widespread cases.
Nissan ETC Gear Fracture (NHTSA Recall 26V081)
Nissan identified a software calibration flaw in 2024–2025 Rogue models equipped with the 1.5-liter VC-Turbo engine, affecting more than 300,000 vehicles.15During every ignition start-up, the engine computer runs a diagnostic sweep that drives the throttle's internal plastic gears closed until they hit a mechanical stopper to calibrate a zero point. The flawed calibration applied that high-torque contact for too long on each start, and the repeated stress fractured the gear teeth over time.15The loose plastic fragments jammed the throttle plate closed, and the computer — detecting that the commanded throttle angle didn't match the actual angle — forced the vehicle into a Loss of Motive Power state that blocked the transmission from engaging forward or reverse gears at all.15NHTSA's remedy required a software reprogram and, where gear damage had already occurred, full throttle body replacement.
GM Accelerator Pedal Harness Chafing (Special Coverage N182188250)
Owners of 2016–2018 Chevrolet Malibu and Buick LaCrosse vehicles reported sudden power loss at highway speed, decelerating to roughly 20 mph and consistently triggering DTC P2138.16,19GM traced the cause to a factory assembly error: the wiring harness carrying the accelerator pedal sensor's signal wires was routed too close to a sharp metal clamp on a heater hose. Normal engine vibration slowly chafed through the wire insulation, creating an intermittent short-to-ground that corrupted the dual-sensor correlation the computer relies on — and the fail-safe activated exactly as it was designed to.16 Under Special Coverage Adjustment N182188250, GM extended the warranty covering the repair to 10 years or 150,000 miles.16
Turbocharger Duct Disconnects (GM Recall N192271200)
In 2019, GM issued Product Emission Recall N192271200 for Chevrolet Equinox, Malibu, and GMC Terrain models with the 1.5-liter turbocharged engine, after the pressurized air from peak turbo boost proved strong enough to blow the charge air cooler's outlet duct completely off the throttle body.17 The sudden loss of intake pressure caused the mass airflow sensor and manifold pressure sensor readings to contradict each other, and the computer cut power to prevent the turbocharger from over-spinning while chasing a boost target it could no longer reach.17The remedy replaced the retaining clips with a higher-tension design capable of withstanding the pneumatic force.
Network Failure: The GM SDGM Logic Lock (TSB 20-NA-212)
In Cadillac Escalades and heavy-duty Chevrolet trucks, a software anomaly in the Serial Data Gateway Module — the master router for the vehicle's CAN data bus — caused the module to stop transmitting network data entirely while still drawing power.18 With the engine computer cut off from the instrument cluster, the anti-lock brake system, and the body control modules, it engaged a severe fail-safe: dead dashboard gauges, a start-then-stall condition, and multiple network communication codes across every module.18 Technicians had to pull the main power fuse to force a hard reset of the module until GM released a permanent software fix.
Diagnostic Trouble Codes Behind the Warning
Codes are standardized under SAE J2012 so they mean the same thing across every manufacturer's scan tool, with a handful of manufacturer-specific codes layered on top for OEM-specific systems like Ford's Fail-Safe Cooling.9
| Code | Definition | Fail-Safe Trigger |
|---|---|---|
| P2138 | Throttle/Pedal Position Sensor/Switch D/E Voltage Correlation | Dual accelerator pedal sensor signals don't match; throttle response is cut to prevent unintended acceleration. |
| P2135 | Throttle/Pedal Position Sensor/Switch A/B Voltage Correlation | Dual throttle position sensor signals don't match; power to the throttle motor is cut, letting return springs close it to the default angle. |
| P0299 | Engine Underboost | Turbocharger fails to reach commanded boost, often from a blown charge pipe; fueling is restricted to prevent overly rich combustion. |
| P1299 | Cylinder Head Over-Temperature Protection Active (Ford-specific) | CHT sensor detects an overheat; Fail-Safe Cooling deactivates cylinders to act as air pumps. |
Source: SAE J2012-standardized diagnostic trouble code definitions, cross-referenced with manufacturer TSBs.9,10
What a Technician Actually Does
Because the computer masks the root cause behind a generic power reduction, ASE (National Institute for Automotive Service Excellence) diagnostic guidelines discourage blind parts-replacement without circuit analysis first.20A scan tool retrieving a code like P2138 confirms that the computer detected a sensor mismatch, but it doesn't identify whether the fault is a corroded connector, a chafed wire, or a genuinely worn sensor — that requires physical testing.
A standard multimeter can confirm a sensor's reference voltage and ground continuity, but its sampling rate is too slow to catch an intermittent fault that lasts only milliseconds. Technicians instead use a multi-channel digital storage oscilloscope to back-probe both sensor channels simultaneously while slowly depressing the pedal, watching for the microscopic voltage dropouts that a multimeter would average out and miss entirely.10
Once a defective throttle body or sensor is replaced, the vehicle typically will not exit reduced power mode on its own — the computer has the old component's baseline voltage stored in memory and needs a scan-tool-driven “Idle Relearn” or throttle adaptation procedure to calibrate the new part's resting values.10 Skipping that step causes the same correlation code, and the same fail-safe, to return immediately.
Aftermarket “torque monitoring off” tunes disable the safety net. Some performance shops offer software flashes marketed to eliminate nuisance limp-mode events after installing a larger turbocharger or aggressive fuel map, by disabling the EGAS Level 2 Function Monitoring described earlier.21 That also removes the cross-check between requested and actual torque entirely — meaning a failed sensor or a stuck-open throttle plate on a modified vehicle will no longer trigger a protective power cut at all.
Symptom-to-Cause Quick Reference
The exact circumstances around the warning narrow the likely cause considerably, even before a scan tool is plugged in.
| What You Notice | Likely Cause | Why |
|---|---|---|
| Power cuts only under hard acceleration or towing | Chafed accelerator pedal wiring harness | Engine load and vibration stretch a chafed wire into intermittent contact with a ground point. |
| Temperature gauge spikes to Hot at the same time | Fail-Safe Cooling activation (CHT sensor) | The computer is deactivating cylinders as air pumps to prevent head damage. |
| Car is stuck in one gear and won't shift | Transmission Control Module fail-safe | Low fluid pressure or a slipping clutch pack triggered a locked-gear protective mode. |
| Vehicle is a diesel truck, DEF light was on for days first | EPA-mandated DEF inducement derate | 40 CFR § 1036.111 requires progressive torque and speed restriction until DEF is refilled. |
| Dashboard gauges went dead along with the power loss | CAN bus / gateway module communication failure | Loss of network data between modules forces a severe, multi-system fail-safe. |
| Happens mainly at cold start, transmission won't engage | Throttle actuator gear fracture (e.g., Nissan Recall 26V081) | Broken plastic gear fragments jam the throttle plate during the start-up calibration sweep. |
Frequently Asked Questions
Is it safe to keep driving with reduced engine power on?
It's generally safe to drive slowly and carefully to a repair shop or a safe location, since the fail-safe is specifically designed to keep the vehicle maneuverable at a reduced speed rather than shutting it down. Merging onto a highway or attempting to pass traffic is a different matter — with road speed capped at roughly 20 to 30 mph, the vehicle cannot safely keep pace with highway traffic.
Will the message go away on its own?
Sometimes. If the fault was a momentary sensor glitch — a brief voltage correlation error that doesn't recur — a restart can clear a Pending code before it's ever confirmed. A confirmed fault tied to a physical defect, like a chafed harness or a fractured throttle gear, will return every time the same conditions reoccur until the underlying hardware is repaired.
Can I just clear the code and keep driving?
Clearing the code with a scan tool removes the dashboard message temporarily, but it does not repair the underlying sensor correlation fault, transmission issue, or overheating condition that triggered the fail-safe in the first place. The same code — and the same power cut — typically returns as soon as the triggering condition happens again.
Is reduced engine power the same thing as a blinking check engine light?
No. A blinking check engine light specifically signals an active, severe misfire capable of damaging the catalytic converter within minutes, and it can occur with or without a reduced-power message. See our companion report on why an engine light blinks for that separate mechanism. A steady, non-flashing check engine light alongside reduced power more often points to the sensor-correlation and fail-safe-cooling triggers covered above; our report on why a check engine light comes on and off explains the separate maturation logic behind an intermittent lamp.
Why does my diesel truck keep losing power even though nothing feels broken?
Check the Diesel Exhaust Fluid level and any related dashboard warnings first. Under 40 CFR § 1036.111, an empty DEF tank or a faulty NOx sensor triggers an escalating, federally mandated torque and speed restriction regardless of whether the engine itself has any mechanical problem.