What the Mittwald Breach Shows About MCP Server Security
In October 2026 an attacker reached 56 customer projects at the German web host Mittwald through a flaw in the host's own MCP server. A reconstruction of what happened, a full account of what Mittwald did right, and what the protocol specification already requires of a server like theirs.