CVE-2026-113743: Tenstorrent tt-metal load_checkpoints.py load_hf_state_dict_filtered path traversal
A weakness has been identified in Tenstorrent tt-metal up to 0.80.0. The affected element is the function loadhfstatedictfiltered of the file models/tttransformers/tt/loadcheckpoints.py. This manipulation of the argument weightmap causes path traversal. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.81.0-dev20261016 is sufficient to fix this issue. Patch name: 4851ccf347f6903c3d819eed60705600386e52c3. It is suggested to upgrade the affected component.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Tenstorrent tt-metalto a version that resolves this vulnerability.Fixed in 0.81.0-dev20261016Patch 4851ccf347f6903c3d819eed60705600386e52c3
Event History
Frequently Asked Questions
Which deployments are affected?
Tenstorrent tt-metal versions up to and including 0.80.0 are affected when they use load_hf_state_dict_filtered in models/tt_transformers/tt/load_checkpoints.py with a manipulable weight_map argument.
What does an attacker need to exploit this issue?
The attack can be initiated remotely and requires manipulation of the weight_map argument. The supplied data does not identify any authentication requirement or specific user interaction condition.
Is public exploit information available?
Yes. A public exploit has been made available, so affected deployments should be treated as having practical exploitation risk.
What version fixes the issue?
Upgrade tt-metal to version 0.81.0-dev20261016 or later. The referenced fix is patch 4851ccf347f6903c3d819eed60705600386e52c3.