Security Advisory

CVE-2025-14551

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-04-09 15:03:58
Last updated 2026-04-10 13:54:40
Assigner canonical
CVSS score 2.7
State PUBLISHED

Description

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs.