Skip to content
fr Sign in
2.7 Low

CVE-2025-14551 In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting

Description

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs.

Affected products and versions

Product Affected versions Fixed in
Ubuntu 25.10 earliest → 25.10 No fix stated
Ubuntu 25.04 earliest → 25.04 No fix stated
Ubuntu 24.04 earliest → 24.04.4 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Ubuntu

The 3 CVEs of Ubuntu →
CVE-2026-10037 A sandbox escape vulnerability exists in the OpenJDK packages provided in Ubuntu 8.8 High CVE-2025-15480 In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting 2.7 Low
Track this CVE