// AI threat desk · 15 Nov 2026
Home/AGENT · Agent Security
Agent SecurityMediumMCPCVSS not assigned

Mittwald MCP server flaw exploited, 56 projects compromised

Mittwald said attackers exploited a flaw in its MCP server and compromised 56 customer projects after going undetected for eight days.

· 2 min read
AI-generated image of analysts reviewing a cloud server security incident on blurred monitors.
AI-generated image, not a photo of the event.
Key takeaways
  • Mittwald said attackers exploited a flaw in its MCP server and compromised 56 customer projects.
  • The MCP server connects customer AI assistants to mStudio, Mittwald’s website and hosting management platform.
  • Mittwald’s managing director said the attacker appeared to have used AI tools, citing logs that show the attacker moved through the system extremely quickly.

Mittwald said attackers exploited a flaw in its Model Context Protocol server and compromised 56 customer projects after going undetected on its systems for eight days.

The affected MCP server lets customers connect AI assistants to mStudio, Mittwald’s platform for managing websites and hosting services. Mittwald’s managing director said the attacker appeared to have used AI tools.

Mittwald said the customer center and the websites managed there were not affected by the incident.

On this page

Mittwald logs pointed to AI-assisted activity

Mittwald said the attacker appeared to use AI tools during the breach. Its logs showed that the attacker worked through the system extremely quickly, with some steps separated by only seconds.

The company’s managing director, Robert Meyer, said the exploited MCP server was used to let customers connect AI assistants to mStudio.

Mittwald restricted access during the investigation

Mittwald later said SSH access was restored. Websites it had blocked as a precaution remained blocked, while the customer center and the websites managed there had not been affected.

The company said external IT forensics experts supported the analysis and that it informed the relevant authorities.

Mittwald said it forensically evaluated the 56 compromised projects and the MCP server. After repeated scans, it said it found no additional compromised projects.

External IT forensics experts continued to support the analysis, and Mittwald said it had informed the relevant authorities. The company also said it could not currently establish any attacker activity on its systems.

FAQ

What happened in the Mittwald MCP server incident?

Mittwald said attackers exploited a flaw in its MCP server and compromised 56 customer projects after going undetected on its systems for eight days.

Who was affected by the Mittwald breach?

The affected projects were Mittwald customer projects connected through the company’s MCP server, which lets customers connect AI assistants to mStudio.

Did the attacker use AI tools?

Mittwald’s managing director said the attacker appeared to have used AI tools, citing logs showing the attacker worked through the system extremely quickly.

Were more Mittwald projects compromised?

Mittwald said it forensically evaluated the 56 compromised projects and found no additional compromised projects after repeated scans.

What did Mittwald do after the incident?

Mittwald said it would block mStudio login and SSH access to customer projects. It later said SSH access was restored and customers could set up a passkey with mStudio reactivated.

Sources

  1. Sicherheitsvorfall am MCP-Server, MittwaldPrimary
  2. Alleged AI-aided cyberattack exploits assistant interface to breach German web host, The Record
How we checked this story
ClaimSourceStatus
Mittwald said hackers compromised 56 customer projects after remaining undetected on its systems for eight days.Mittwald, via The RecordAttributed
The attackers exploited a flaw in Mittwald’s MCP server, which lets customers connect AI assistants to mStudio.Mittwald, via The RecordAttributed
Mittwald said it forensically evaluated 56 compromised projects and found no additional compromised projects after repeated scans.MittwaldConfirmed
Mittwald said it could not currently establish any attacker activity on its systems.MittwaldConfirmed
Mittwald said the customer center and websites managed there were never affected by the incident.MittwaldConfirmed
Mittwald said external IT forensics experts supported its analysis and that it informed the relevant authorities.MittwaldConfirmed

Could not verify

  • Whether the MCP flaw has a CVE assignment is not established
  • How many people or organizations were affected beyond the 56 projects is not established
MCP
See all in Agent Security →
Explore with AI
ChatGPT
Claude
Perplexity
Grok