Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers

A critical authentication bypass vulnerability in Xen Orchestra is currently under active exploitation. The flaw allows attackers to gain administrator privileges and completely compromise underlying XCP-ng virtualization hosts. Administrators are strongly advised to apply available patches immediately to mitigate the risk of full infrastructure takeover.