# Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers

> HelixNews · Web page: https://helixnews.one/story/6054 · All pages for agents: https://helixnews.one/llms.txt

1 outlet covering · First listed: BleepingComputer, Nov 10, 2026, 10:17 AM · Read it: <https://www.bleepingcomputer.com/news/security/critical-xen-orchestra-auth-bypass-flaw-exploited-to-hijack-vm-servers/>

A critical authentication bypass vulnerability in Xen Orchestra is being actively exploited in attacks that could grant administrator privileges and allow takeover of XCP-ng virtualization hosts.

## Who's covering it

In the order they published:

- Nov 10, 2026, 10:17 AM: [Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers](<https://www.bleepingcomputer.com/news/security/critical-xen-orchestra-auth-bypass-flaw-exploited-to-hijack-vm-servers/>) — BleepingComputer (Specialist, United States)
  A critical authentication bypass vulnerability in Xen Orchestra is being actively exploited in attacks that could grant administrator privileges and allow takeover of XCP-ng virtualization hosts.