Mittwald says MCP flaw let an attacker hit 56 customer projects
Original title: Alleged AI-aided cyberattack exploits assistant interface to breach German web host
The German host says the intruder was undetected for eight days; AI use is inferred from log speed only.
Mittwald CM Service, a North Rhine-Westphalia host for web agencies, said hackers compromised 56 customer projects by exploiting a flaw in its Model Context Protocol server, which lets customers connect AI assistants to the mStudio hosting platform. Managing director Robert Meyer said logs showed steps only seconds apart and suggested AI tools, but gave no other evidence. It is unclear whether the flaw is in Mittwald’s code or open-source MCP libraries. The attacker was undetected for eight days. Forensics and rescans found no further attacker activity as of Friday, and a fuller account is planned next week. Authorities were notified.
Unconfirmed: AI involvement is Meyer’s reading of log speed, and whether the flaw is in Mittwald code or MCP libraries is unknown.
- Meyer said the attacker first tested the flaw during the October PHP2Shell patch scramble.
- He said access attempts were disguised and paired with diversionary tactics.
- External IT forensic experts are supporting the analysis.
- Mittwald did not immediately explain how it distinguished AI tools from ordinary scripts.
Impact: Unauthorized access to 56 customer hosting projects
| Product | Affected |
|---|---|
| Mittwald mStudio MCP server | — |
- Vendors
- Mittwald
- Products
- mStudioModel Context Protocol
- Victims
- Mittwald
- Countries
- Germany
From the original article
2 min read at therecord.mediaHackers allegedly assisted by AI breached a German web hosting company through a tool designed to allow customers to connect AI assistants to their accounts, the company disclosed.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.