{"uuid": "ad3a908b-ef90-456c-b5c0-e97fc6cb7e8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-7q9c-hpx7-9cwm", "type": "seen", "source": "https://gist.github.com/alon710/7b5f9a5f3085441ccfaee4e599346158", "content": "# GHSA-7Q9C-HPX7-9CWM: GHSA-7Q9C-HPX7-9CWM: Unauthenticated Remote Shutdown in @typespec/spector Mock Server\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-09-04\n> **Full Report:** https://cvereports.com/reports/GHSA-7Q9C-HPX7-9CWM\n\n## Summary\nAn unauthenticated remote shutdown vulnerability exists in the Microsoft TypeSpec Spector mock server. Due to missing authentication on critical administrative routes and binding to all network interfaces, any remote attacker can shut down the mock server.\n\n## TL;DR\nUnauthenticated remote attackers can shut down the @typespec/spector mock server via a simple POST request due to missing authentication and wildcard host binding.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-306\n- **Attack Vector**: Network\n- **CVSS v3.1**: 7.5 (High)\n- **Exploit Status**: PoC Available\n- **CWE Name**: Missing Authentication for Critical Function\n- **Affected Function**: POST /.admin/stop\n- **Impact**: Denial of Service (DoS)\n\n## Affected Systems\n\n- TypeSpec Spector mock server\n- @typespec/spector NPM package\n- **@typespec/spector**: <= 0.1.0-alpha.26 (Fixed in: `0.1.0-alpha.27`)\n\n## Mitigation\n\n- Bind the server to 127.0.0.1 instead of 0.0.0.0.\n- Implement host-level firewall rules to restrict port access.\n- Upgrade @typespec/spector package to version 0.1.0-alpha.27 or higher.\n\n**Remediation Steps:**\n1. Identify any usages of @typespec/spector in development scripts or packages.\n2. Update dependency version in package.json to at least '0.1.0-alpha.27'.\n3. Verify that the server starts on '127.0.0.1' instead of binding to '0.0.0.0' or '::'.\n\n## References\n\n- [GitHub Security Advisory GHSA-7Q9C-HPX7-9CWM](https://github.com/advisories/GHSA-7q9c-hpx7-9cwm)\n- [Microsoft TypeSpec Security Advisory](https://github.com/microsoft/typespec/security/advisories/GHSA-7q9c-hpx7-9cwm)\n- [TypeSpec Fix PR #11274](https://github.com/microsoft/typespec/pull/11274)\n- [@typespec/spector Release v0.1.0-alpha.27](https://github.com/microsoft/typespec/releases/tag/@typespec/spector@0.1.0-alpha.27)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/GHSA-7Q9C-HPX7-9CWM) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-04T22:33:22.661375Z"}