CVE-2026-113743 PUBLISHED

Tenstorrent tt-metal load_checkpoints.py load_hf_state_dict_filtered path traversal

Assigner: VulDB
Reserved: 20.10.2026 Published: 21.10.2026 Updated: 21.10.2026

A weakness has been identified in Tenstorrent tt-metal up to 0.80.0. The affected element is the function load_hf_state_dict_filtered of the file models/tt_transformers/tt/load_checkpoints.py. This manipulation of the argument weight_map causes path traversal. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.81.0-dev20261016 is sufficient to fix this issue. Patch name: 4851ccf347f6903c3d819eed60705600386e52c3. It is suggested to upgrade the affected component.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
CVSS Score: 5.3

Product Status

Vendor Tenstorrent
Product tt-metal
Versions
  • Version 0.1 is affected
  • Version 0.2 is affected
  • Version 0.3 is affected
  • Version 0.4 is affected
  • Version 0.5 is affected
  • Version 0.6 is affected
  • Version 0.7 is affected
  • Version 0.8 is affected
  • Version 0.9 is affected
  • Version 0.10 is affected
  • Version 0.11 is affected
  • Version 0.12 is affected
  • Version 0.13 is affected
  • Version 0.14 is affected
  • Version 0.15 is affected
  • Version 0.16 is affected
  • Version 0.17 is affected
  • Version 0.18 is affected
  • Version 0.19 is affected
  • Version 0.20 is affected
  • Version 0.21 is affected
  • Version 0.22 is affected
  • Version 0.23 is affected
  • Version 0.24 is affected
  • Version 0.25 is affected
  • Version 0.26 is affected
  • Version 0.27 is affected
  • Version 0.28 is affected
  • Version 0.29 is affected
  • Version 0.30 is affected
  • Version 0.31 is affected
  • Version 0.32 is affected
  • Version 0.33 is affected
  • Version 0.34 is affected
  • Version 0.35 is affected
  • Version 0.36 is affected
  • Version 0.37 is affected
  • Version 0.38 is affected
  • Version 0.39 is affected
  • Version 0.40 is affected
  • Version 0.41 is affected
  • Version 0.42 is affected
  • Version 0.43 is affected
  • Version 0.44 is affected
  • Version 0.45 is affected
  • Version 0.46 is affected
  • Version 0.47 is affected
  • Version 0.48 is affected
  • Version 0.49 is affected
  • Version 0.50 is affected
  • Version 0.51 is affected
  • Version 0.52 is affected
  • Version 0.53 is affected
  • Version 0.54 is affected
  • Version 0.55 is affected
  • Version 0.56 is affected
  • Version 0.57 is affected
  • Version 0.58 is affected
  • Version 0.59 is affected
  • Version 0.60 is affected
  • Version 0.61 is affected
  • Version 0.62 is affected
  • Version 0.63 is affected
  • Version 0.64 is affected
  • Version 0.65 is affected
  • Version 0.66 is affected
  • Version 0.67 is affected
  • Version 0.68 is affected
  • Version 0.69 is affected
  • Version 0.70 is affected
  • Version 0.71 is affected
  • Version 0.72 is affected
  • Version 0.73 is affected
  • Version 0.74 is affected
  • Version 0.75 is affected
  • Version 0.76 is affected
  • Version 0.77 is affected
  • Version 0.78 is affected
  • Version 0.79 is affected
  • Version 0.80.0 is affected
  • Version 0.81.0-dev20261016 is unaffected

Credits

  • Dem0000000 (VulDB User) reporter

References

Problem Types

  • Path Traversal CWE