CVE-2025-14551: Canonical Ubuntu Subiquity

High severity, CVSS 8.1. EPSS: 0.3% chance of exploitation in the next 30 days.

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs.

Affected products

• Canonical Ubuntu Subiquity: version 24.04.4 only

Published 2026-04-09. Last modified 2026-10-07.