Xen Orchestra auth bypass actively exploited for VM hijacking

A critical authentication bypass vulnerability in Xen Orchestra is being actively exploited to grant administrator privileges and take over XCP-ng virtualization hosts. Attackers can gain full control of virtual machine infrastructure through the flaw. Active exploitation is confirmed. Organizations running Xen Orchestra should prioritize patching and restrict network access to the management interface.