# Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access

Source: [The Hacker News](https://thehackernews.com/2026/11/hackers-exploit-critical-xen-orchestra.html) · 2026-11-10 · Security
Page: https://themorning.dev/story/hackers-exploit-critical-xen-orchestra-auth-bypass-flaw-to-gain-admin-access-9398616ade4dc7e1
Kind: security · Impact: high

## In brief

- Vates VMS warned of a critical authentication bypass in Xen Orchestra.
- Vates says the flaw is being actively exploited in the wild.
- The flaw is tracked as VSA-2026-062 and does not yet have a CVE identifier.

## Why it matters

Attackers are already using this authentication bypass to gain admin access to Xen Orchestra, which manages Xen virtualization infrastructure.

## What to do

- Review Vates advisory VSA-2026-062 to determine whether your Xen Orchestra instance is affected and what fix is available

## Coverage

- [Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access](https://thehackernews.com/2026/11/hackers-exploit-critical-xen-orchestra.html) — The Hacker News, 2026-11-10

Tags: xen-orchestra, authentication-bypass, vulnerability, virtualization, exploited-in-the-wild

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev