Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2025-14551 Sensitive Credential Disclosure in Ubuntu Subiquity 24.04.4 Crash Reports https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-14551
Post summary
The entry announces a credential disclosure flaw in Ubuntu Subiquity 24.04.4, providing minimal technical detail and no evidence of exploitation or remediation.
CVE-2025-14551 In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Laun… https://www.cve.org/CVERecord?id=CVE-2025-14551
Post summary
The message announces a new CVE (CVE‑2025‑14551) affecting Ubuntu Subiquity 24.04.4, detailing that it can leak user credentials via crash reports during installation failures.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | canonical | ubuntu_subiquity | 24.04.4 | - | - |