Access Control Vulnerability in Xen Hypervisor Affects Guest Configuration Data Retrieval
CVE-2026-62429

Currently unrated

Key Information:

Vendor: Xen Project
Status: Xen Project
Vendor: CVE Published:; 28 July 2026

🔔 Create Xen Project Vulnerability Alert

What is CVE-2026-62429?

This vulnerability allows unauthorized access to the vNUMA configuration data during the domain destruction process in the Xen Hypervisor. The lack of synchronization between the retrieval and cleanup of configuration information managed by the device model creates a security concern, potentially exposing sensitive data even after an attempted domain termination.

Affected Version(s)

Xen consult Xen advisory XSA-502

References

https://xenbits.xenproject.org/xsa/advisory-502.html

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 28, 2026
Vulnerability Reserved
Jul 14, 2026

Credit

This issue was discovered by Teddy Astie of Vates.

CVE-2026-62429 Data

JSON