๐Ÿ” CVE Alert

CVE-2025-14551

UNKNOWN 0.0

Senstive information disclosure was affecting subiquity

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
13th

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs.

CWE CWE-1258
Vendor canonical
Product ubuntu
Ecosystems
Industries
Technology
Published Apr 9, 2026
Last Updated Apr 10, 2026
Stay Ahead of the Next One

Get instant alerts for canonical ubuntu

Be the first to know when new unknown vulnerabilities affecting canonical ubuntu are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Canonical / Ubuntu
0 โ‰ค 24.04.4 0 โ‰ค 25.10 0 โ‰ค 25.04

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
github.com: https://github.com/canonical/subiquity/pull/2358 github.com: https://github.com/canonical/subiquity/pull/2357