---
title: "Discussion on \"Xen Orchestra Authentication Bypass: Empty Cookie to Root\" | Hashnode"
description: "Discussion on \"Xen Orchestra Authentication Bypass: Empty Cookie to Root\". Xen Orchestra authentication bypass VSA-2026-062: how an empty cookie gave attackers admin and a VM import gave root on XCP-ng hosts, with IOCs and checks."
url: "https://hashnode.com/posts/xen-orchestra-auth-bypass-vsa-2026-062/6af5a1667df28551d2b3b7d3"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Xen Orchestra Authentication Bypass: Empty Cookie to Root](https://404-founders.com/blog/xen-orchestra-auth-bypass-vsa-2026-062?utm_source=hashnode&utm_medium=feed)

Xen Orchestra authentication bypass VSA-2026-062: how an empty cookie gave attackers admin and a VM import gave root on XCP-ng hosts, with IOCs and checks.

2d ago · 11 min read · 404-founders.com  
Read the article

-   [#cybersecurity](https://hashnode.com/tag/cybersecurity)
-   [#security](https://hashnode.com/tag/security)
-   [#virtualization](https://hashnode.com/tag/virtualization)
-   [#vulnerability](https://hashnode.com/tag/vulnerability)

## Written by

[404 Founders](https://hashnode.com/@404-founders)

@404-founders · Bosnia and Herzegovina, Estonia

  
[View profile](https://hashnode.com/@404-founders)

Error-proof Cyber Solutions

Securing the digital frontier. Error-proof cyber solutions.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.