CVE-2025-14551 — Senstive information disclosure was affecting subiquity

CVE-2025-14551

Senstive information disclosure was affecting subiquity PUBLISHED

Description (CNA)

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs.

Affected (CNA)

Vendor / product	Versions
Canonical / Ubuntu	affected 0 through 24.04.4; affected 0 through 25.10; affected 0 through 25.04

CWE

CWE-1258

References

https://github.com/canonical/subiquity/pull/2358
https://github.com/canonical/subiquity/pull/2357

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.