Ubuntu Subiquity Sensitive Credential Leak Vulnerability

A vulnerability in Ubuntu Subiquity version 24.04.4 could lead to the unintentional disclosure of sensitive user credentials during the crash reporting process. If an installation fails and the user submits a bug report to Launchpad, Subiquity may include certain user credentials, such as the plaintext Wi-Fi password, in the logs attached to the report.

Impact

Exploitation of this vulnerability could result in the leakage of sensitive user information, including plaintext Wi-Fi passwords, potentially leading to unauthorized access to personal networks.

Remediation

Users can update to the latest version of Subiquity to address this vulnerability. The patched version is available in the official Ubuntu repositories.