
A guest can read every other guest's memory. An AI found it first
2026-11-05Security
Xen Security Advisory 523 describes arbitrary cross-domain read and write with no known mitigation, affecting every release since 4.6. The credits name Anthropic using Claude, and a second AI team that reported the same flaw independently.