WhatBrokeToday
FAQ
Today's Trends
highInvestigating

Mittwald mStudio Session Token Compromise Affects MCP Users

  1. Investigating(current)
  2. Trending(upcoming)
  3. Workaround available(upcoming)
  4. Resolved(upcoming)

Executive summary

An incident at German hosting provider Mittwald resulted in attackers gaining access to mStudio account session tokens. Users who connected mStudio to an AI assistant via the Model Context Protocol (MCP) are advised to rotate all project secrets, passwords, API keys, and SSH keys.

No verified workaround yet

None of the linked reports describe a mitigation. Follow this incident to hear when one appears.

Technical root cause

Under active investigation. No report has identified a root cause yet.

Evidence

1 report · 1 BlueskyShow
  1. [1]
    Bluesky First report
    Just heard about the #MCP incident at German hosting provider #Mittwald.(opens Bluesky post in a new tab)

    Just heard about the #MCP incident at German hosting provider #Mittwald. 😬 The attacker got hold of session tokens for mStudio accounts. If you connected mStudio to an AI assistant via MCP, it’s time to rotate your secrets: password, API keys, project tokens, SSH keys … www.mittwald.de/lp/mcp-faq

    by matthiasott.com 1upvotes 2comments

Timeline

  1. First report on Bluesky post

    Just heard about the #MCP incident at German hosting provider #Mittwald.

    Source