Xen Orchestra auth bypass exploited to hijack XCP-ng nodes

Attackers are actively exploiting critical authentication bypass vulnerabilities in Xen Orchestra, a web UI for XCP-ng and XenServer, allowing arbitrary code execution as admin and full takeover of virtualized infrastructure. The flaws are confirmed exploited in the wild, though the scale and targeting remain unclear. This matters because compromised hypervisor management layers can lead to widespread VM compromise and data exfiltration across affected enterprises.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works