ChordNews
← All news

Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers

By ChordNews · First written (new coverage )

Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access
Image: thehackernews.com
Comments 0

Summary

A critical authentication bypass vulnerability in Xen Orchestra is being actively exploited in attacks that could grant administrator privileges and allow takeover of XCP-ng virtualization hosts. French software company Vates VMS has warned of the flaw, which it said is being exploited in the wild. The flaw is tracked as VSA-2026-062 and does not yet have a CVE identifier. Vates VMS said in an alert that REST cookie parsing turns authenticationToken=j:%7B%7D into an empty object, which the REST authentication then passes on. The available reports do not give affected versions or the scale of the attacks.

This continues an earlier story: Hackers actively exploit the SSHole OpenSSH flaw to breach Linux systems

Timeline

  1. BleepingComputer

    Source ↗

    BleepingComputer reports that a critical authentication bypass vulnerability in Xen Orchestra is being actively exploited in attacks that could grant administrator privileges and allow takeover of XCP-ng virtualization hosts.

  2. The Hacker News

    Source ↗

    The Hacker News reports that Vates VMS warned of a critical Xen Orchestra authentication bypass flaw, tracked as VSA-2026-062 with no CVE identifier yet, that it said is being actively exploited in the wild.

Comments

No comments yet.

    to like and comment.

    © 2026 ChordNews