Xen Orchestra auth bypass is being used against virtualization hosts Vates reports active attacks against its management server. Update both release channels, restrict management access and review affected hosts.