Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access

A critical security vulnerability in Xen Orchestra is being actively exploited, according to a warning from French software company Vates VMS. The vulnerability is an authentication bypass flaw that allows hackers to gain admin access. It is tracked as VSA-2026-062, but does not yet have a CVE identifier. The issue arises from REST cookie parsing, which incorrectly handles a specific authentication token. This flaw enables attackers to bypass authentication and gain unauthorized access. Vates VMS has issued an alert about the vulnerability, which is currently being exploited in the wild.