Critical Xen Orchestra authentication bypass flaw exploited to hijack VM servers

A critical authentication bypass vulnerability in Xen Orchestra is being actively exploited in attacks that could grant administrator privileges and enable takeover of XCP-ng virtualization hosts.