Read the docs
TI-2026-78649 Aliases CVE-2026-113743

Path traversal in Tenstorrent tt-metal weight_map loading

Priority MEDIUM 57CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Passive
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
Low · Low · Low
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

Tenstorrent tt-metal up to 0.80.0 is affected. The load_hf_state_dict_filtered function in models/tt_transformers/tt/load_checkpoints.py lets a manipulated weight_map argument cause path traversal (CWE-22). A remote attacker can exploit it without privileges, though user interaction is required. A public exploit is available.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Description from the CNA

A weakness has been identified in Tenstorrent tt-metal up to 0.80.0. The affected element is the function load_hf_state_dict_filtered of the file models/tt_transformers/tt/load_checkpoints.py. This manipulation of the argument weight_map causes path traversal. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.81.0-dev20261016 is sufficient to fix this issue. Patch name: 4851ccf347f6903c3d819eed60705600386e52c3. It is suggested to upgrade the affected component.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00444 38th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix Fixed tt-metal (Tenstorrent): 0.81.0-dev20261016

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Tenstorrenttt-metal0.1; 0.2; 0.3; 0.4; 0.5; 0.6; 0.7; 0.8; 0.9; 0.10; 0.11; 0.12; 0.13; 0.14; 0.15; 0.16; 0.17; 0.18; 0.19; 0.20; 0.21; 0.22; 0.23; 0.24; 0.25; 0.26; 0.27; 0.28; 0.29; 0.30; 0.31; 0.32; 0.33; 0.34; 0.35; 0.36; 0.37; 0.38; 0.39; 0.40; 0.41; 0.42; 0.43; 0.44; 0.45; 0.46; 0.47; 0.48; 0.49; 0.50; 0.51; 0.52; 0.53; 0.54; 0.55; 0.56; 0.57; 0.58; 0.59; 0.60; 0.61; 0.62; 0.63; 0.64; 0.65; 0.66; 0.67; 0.68; 0.69; 0.70; 0.71; 0.72; 0.73; 0.74; 0.75; 0.76; 0.77; 0.78; 0.79; 0.80.00.81.0-dev20261016Patch availableCNA
  • tt-metal VendorTenstorrent Affected 0.1; 0.2; 0.3; 0.4; 0.5; 0.6; 0.7; 0.8; 0.9; 0.10; 0.11; 0.12; 0.13; 0.14; 0.15; 0.16; 0.17; 0.18; 0.19; 0.20; 0.21; 0.22; 0.23; 0.24; 0.25; 0.26; 0.27; 0.28; 0.29; 0.30; 0.31; 0.32; 0.33; 0.34; 0.35; 0.36; 0.37; 0.38; 0.39; 0.40; 0.41; 0.42; 0.43; 0.44; 0.45; 0.46; 0.47; 0.48; 0.49; 0.50; 0.51; 0.52; 0.53; 0.54; 0.55; 0.56; 0.57; 0.58; 0.59; 0.60; 0.61; 0.62; 0.63; 0.64; 0.65; 0.66; 0.67; 0.68; 0.69; 0.70; 0.71; 0.72; 0.73; 0.74; 0.75; 0.76; 0.77; 0.78; 0.79; 0.80.0 Fixed in 0.81.0-dev20261016 Patch available CNA

CPE names CNA · 1

CPEVersionsRoleVendor
cpe:2.3:a:tenstorrent:tt-metal:*:*:*:*:*:*:*:*——Tenstorrent
  • cpe:2.3:a:tenstorrent:tt-metal:*:*:*:*:*:*:*:* Versions — — ·Tenstorrent

Remediation

Upgrade tt-metal to version 0.81.0-dev20261016, which fixes this issue. The fix is patch 4851ccf347f6903c3d819eed60705600386e52c3.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

  • Fix · CNA tt-metal (Tenstorrent) Fixed in 0.81.0-dev20261016

Timeline

  1. 2026-10-21 Threatist record created from CVE-2026-113743
  2. 2026-10-27 CISA SSVC decision points changed
  3. 2026-10-27 Priority changed: LOW → MEDIUM

References

Exploit 1

Patch 3

Other 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences