An attacker capable of providing a malicious .tsp file to the compiler can force the application to write or overwrite files anywhere on the local filesystem that the compiler process has write access to. While the written content is constrained to valid OpenAPI YAML or JSON structures, the ability to overwrite configuration files or sensitive application data allows for potential denial-of-service or system instability. This vulnerability affects the TypeSpec compiler stack, specifically openapi3 and compiler versions 1.15.0 and earlier.

Attack Chain

1. Attacker crafts a malicious TypeSpec source file (.tsp) containing a @versioned enum member.
2. The attacker sets a version value containing directory traversal sequences, such as ../../../../tmp/target_file.
3. The attacker invokes the TypeSpec compiler on the malicious source file.
4. The openapi3 emitter reads the crafted version value during the serialization of the OpenAPI specification.
5. The compiler performs path interpolation using the malicious version string, constructing a path that points outside the emitterOutputDir.
6. The emitFile utility executes the file write operation using the resolved traversal path.
7. The target file on the host filesystem is overwritten with the generated OpenAPI YAML/JSON content.

Impact

Successful exploitation allows for arbitrary file creation or overwrite, leading to file corruption and potential denial-of-service scenarios. The impact is limited to the compiler process's filesystem permissions and the file formats supported by the emitter, precluding direct remote code execution or unauthorized file disclosure in the documented exploitation path.

Recommendation

Prioritize the implementation of path sanitization within the TypeSpec compiler emission pipeline.

• Implement logic in the openapi3 emitter to resolve the absolute path of the output file after token interpolation and verify it resides within the emitterOutputDir.
• Slugify or strictly validate all filename tokens derived from spec attributes to strip path separators, absolute path prefixes, and traversal components.
• Audit and patch packages/compiler/src/core/emitter-utils.ts to enforce filesystem containment checks during the writeFile routine.
• Review all TypeSpec projects for usage of externally supplied or untrusted input in @versioned enum definitions.