CVE-2025-14551

نوع الضعف

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs.

المنتجات المتأثرة

• canonical ubuntu_subiquity

المراجع

• https://github.com/canonical/subiquity/pull/2357
• https://github.com/canonical/subiquity/pull/2358