Mittwald discloses MCP server breach of 56 projects, suspects AI use
Mittwald says hackers exploited a flaw in its MCP server to compromise 56 customer projects, if you host there, await its detailed account.
- Published
- Exploitation
- Yes, according to Mittwald’s own disclosure as reported by The Record, not independently verified
What happened
According to The Record, Mittwald CM Service, a hosting provider for web agencies based in North Rhine-Westphalia, disclosed in a blog post on Saturday that hackers compromised 56 customer projects after going undetected on its systems for eight days. The Record The Record’s headline calls the attack “alleged” AI-aided, and the AI element rests on Mittwald’s own statements.
Managing director Robert Meyer said, per The Record, that the attackers exploited a flaw in Mittwald’s Model Context Protocol (MCP) server, which lets customers connect their AI assistants to mStudio, a platform for managing websites and hosting services. The Record It is unclear whether the flaw was in Mittwald’s own code or in open-source MCP software libraries, according to The Record.
Meyer said the attacker appeared to have used AI tools, because the logs “show that he worked his way through our system extremely quickly” and in some cases only seconds passed between steps that would take a human attacker much longer. The Record The Record reports that Mittwald provided no other evidence of AI involvement and did not immediately say how it distinguishes AI tools from conventional scripts that also speed up attackers.
Per Mittwald’s timeline as reported by The Record, the attacker first tested the MCP flaw in October, during a global scramble to patch PHP2Shell. Meyer said the attacker disguised access attempts and used diversionary tactics. External forensic experts are assisting and the relevant authorities have been informed, according to Meyer. After forensic evaluation of the 56 projects and repeated scans, Mittwald said that as of Friday it could not detect further attacker activity. The Record
Not confirmed: whether AI tools were actually used, where the flaw lies (Mittwald code or open-source libraries), what data was accessed, and whether any CVE has been assigned. The Record gives no CVE for the MCP flaw and no fixed version.
Am I affected?
The sources do not list the affected customers. Mittwald says 56 customer projects were compromised. If you host with Mittwald, ask the company whether your projects are among them. If you use mStudio and have connected an AI assistant through Mittwald’s MCP server, that is the component named in the disclosure. Whether other users of the open-source MCP libraries are exposed is not confirmed.
What to do now
- Read Mittwald’s blog post and wait for the detailed account it says it will publish next week, once analysis and recovery are complete. The Record
- Contact Mittwald directly to ask whether your projects were among the 56 compromised.
- As general practice, not drawn from the sources, review recent changes and access activity on your hosted projects and on any AI assistants connected to mStudio.
- Treat further technical guidance as pending until Mittwald publishes details. No patch or fixed version is confirmed in the sources.