Mittwald: security incident involving customer projects and the MCP server

Evidence record

Read the original source ↗

Claim-level citations (3)

• supportsVendor reports service restoration and project count: Mittwald reports exploitation of its MCP entry point on October 27, discovery on November 4, and forensic review of 56 affected projects by November 6; it does not establish model-driven attack execution.

  German first-party statement: Im Schatten von PHP2Shell and dated November 4–7 recovery timeline

• supportsVendor reports service restoration and project count: Mittwald reports an MCP server security incident involving 56 customer projects.

  Sicherheitsvorfall am MCP-Server: incident scope and affected projects

• supportsVendor reports service restoration and project count: The vendor's AI-tool hypothesis is not a verified model-to-tool execution trace; the confirmed AI-security role is the MCP server as the attacked interface.

  Incident account: technical cause and attribution caveats