CVE-2026-23559: Xapi Vbd Local Backend Overridecve-2026-23559-xapi-vbd-local-backend-override
A virtual disk backend path is overridden with a locally provided path from `vBD_other_config`. This configuration dictionary is insufficiently restricted and can be modified by lower-privileged administrators (e.g., `vm-admin`). An attacker can exploit this to read or modify arbitrary files in dom0, leading to arbitrary host access or privilege escalation.
