CVE-2025-14551

Publication date 10 April 2026

Last updated 10 April 2026


Ubuntu priority

Description

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs.

Status

Package Ubuntu Release Status
subiquity 25.10 questing Not in release
24.04 LTS noble Not in release
22.04 LTS jammy
Needs evaluation
20.04 LTS focal
Needs evaluation
18.04 LTS bionic
Needs evaluation


Access our resources on patching vulnerabilities