CVE-2025-14551
No fix known EPSS <1%CVSS 2.7
In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs.
Products: canonical ubuntu
Affected upstream, no fix yet
| Ecosystem | Package |
|---|---|
| PyPI | subiquity |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 18.04 LTS | subiquity | no fix |
| Ubuntu 20.04 LTS | subiquity | no fix |
| Ubuntu 22.04 LTS | subiquity | no fix |