CVE-2025-14551CWE-1258

Senstive information disclosure was affecting subiquity

Low · published April 9, 2026

CVSS v4.0
2.7
EPSS
0%
Percentile
19.9
In the wild
Unconfirmed
What it is

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs.

The record
Technical detail
CVSS v4.0
2.7 · LOW
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:U
EPSS
0.00278 · 19.9th percentile
Weakness
CWE-1258 · Exposure of Sensitive System Information Due to Uncleared Debug Information
Published
2026-04-09T15:03Z
EPSS history
Timeline
  • 09 APR 15:03Z
    Senstive information disclosure was affecting subiquity
    cvelistv5