Observed incident

mittwald revokes exposed session tokens after 56 projects were compromised

Reported

Published here

What happened

mittwald says an intruder exploited its MCP server on October 27 and read session tokens for customers who used the connector to link AI assistants to mStudio. It detected unusual activity on November 4. Its forensic investigation identified 56 compromised projects.

Parties and reporting

Where this happened

Victim location not disclosed. Real organizations or systems were affected or targeted, but the sources do not say where. Explore the world map.

AI tools and systems: mittwald MCP server, mStudio session tokens

Outcome

mittwald revoked the exposed tokens, closed the flaw and took the connector offline. On November 7 it restored mStudio and SSH access. Some websites remained isolated, and repeat scans had found no additional compromised projects.

Operating lesson

Revoke compromised connector sessions, review project access for unfamiliar keys or users, and rotate credentials for downstream services stored in affected projects.

Evidence and limits

The November 4 status notice described a security investigation. The provider identified the MCP server publicly on November 5. It confirmed 56 projects were compromised without establishing that files were taken from each. The attacker’s use of AI is inferred from speed in the logs.

Sources