p PatchFirst

CVE-2026-113743

CVE-2026-113743 · Tenstorrent tt-metal load_checkpoints.py load_hf_state_dict_filtered path traversal

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A weakness has been identified in Tenstorrent tt-metal up to 0.80.0. The affected element is the function load_hf_state_dict_filtered of the file models/tt_transformers/tt/load_checkpoints.py. This manipulation of the argument weight_map causes path traversal. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.81.0-dev20261016 is sufficient to fix this issue. Patch name: 4851ccf347f6903c3d819eed60705600386e52c3. It is suggested to upgrade the affected component.

CVSS 5.3 · Medium · EPSS 0.4% · Fix available

Published
Updated

Affected products and versions

  • tt-metal

    Versions
    • 0.1: Affected
    • 0.2: Affected
    • 0.3: Affected
    • 0.4: Affected
    • 0.5: Affected
    • 0.6: Affected
    • 0.7: Affected
    • 0.8: Affected
    • 0.9: Affected
    • 0.10: Affected
    • 0.11: Affected
    • 0.12: Affected
    • 0.13: Affected
    • 0.14: Affected
    • 0.15: Affected
    • 0.16: Affected
    • 0.17: Affected
    • 0.18: Affected
    • 0.19: Affected
    • 0.20: Affected
    • 0.21: Affected
    • 0.22: Affected
    • 0.23: Affected
    • 0.24: Affected
    • 0.25: Affected
    • 0.26: Affected
    • 0.27: Affected
    • 0.28: Affected
    • 0.29: Affected
    • 0.30: Affected
    • 0.31: Affected
    • 0.32: Affected
    • 0.33: Affected
    • 0.34: Affected
    • 0.35: Affected
    • 0.36: Affected
    • 0.37: Affected
    • 0.38: Affected
    • 0.39: Affected
    • 0.40: Affected
    • 0.41: Affected
    • 0.42: Affected
    • 0.43: Affected
    • 0.44: Affected
    • 0.45: Affected
    • 0.46: Affected
    • 0.47: Affected
    • 0.48: Affected
    • 0.49: Affected
    • 0.50: Affected
    • 0.51: Affected
    • 0.52: Affected
    • 0.53: Affected
    • 0.54: Affected
    • 0.55: Affected
    • 0.56: Affected
    • 0.57: Affected
    • 0.58: Affected
    • 0.59: Affected
    • 0.60: Affected
    • 0.61: Affected
    • 0.62: Affected
    • 0.63: Affected
    • 0.64: Affected
    • 0.65: Affected
    • 0.66: Affected
    • 0.67: Affected
    • 0.68: Affected
    • 0.69: Affected
    • 0.70: Affected
    • 0.71: Affected
    • 0.72: Affected
    • 0.73: Affected
    • 0.74: Affected
    • 0.75: Affected
    • 0.76: Affected
    • 0.77: Affected
    • 0.78: Affected
    • 0.79: Affected
    • 0.80.0: Affected
    • 0.81.0-dev20261016: Not affected

    Update to 0.81.0-dev20261016

Original sources

Check your server →