CVE-2025-14551

Publication date

2026-04-09 15:03:58

Family

canonical

State

PUBLISHED

Description

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the users plaintext Wi-Fi password, in the attached logs.