CVE-2026-113743
Received
Received - Intake
Path Traversal in Tenstorrent tt-metal
Vulnerability report for CVE-2026-113743, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-21
Last updated on: 2026-10-21
Assigner: VulDB
Description
Description
A weakness has been identified in Tenstorrent tt-metal up to 0.80.0. The affected element is the function load_hf_state_dict_filtered of the file models/tt_transformers/tt/load_checkpoints.py. This manipulation of the argument weight_map causes path traversal. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.81.0-dev20261016 is sufficient to fix this issue. Patch name: 4851ccf347f6903c3d819eed60705600386e52c3. It is suggested to upgrade the affected component.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Tenstorrent | tt-metal | 0.1 |
| Tenstorrent | tt-metal | 0.2 |
| Tenstorrent | tt-metal | 0.3 |
| Tenstorrent | tt-metal | 0.4 |
| Tenstorrent | tt-metal | 0.5 |
| Tenstorrent | tt-metal | 0.6 |
| Tenstorrent | tt-metal | 0.7 |
| Tenstorrent | tt-metal | 0.8 |
| Tenstorrent | tt-metal | 0.9 |
| Tenstorrent | tt-metal | 0.10 |
| Tenstorrent | tt-metal | 0.11 |
| Tenstorrent | tt-metal | 0.12 |
| Tenstorrent | tt-metal | 0.13 |
| Tenstorrent | tt-metal | 0.14 |
| Tenstorrent | tt-metal | 0.15 |
| Tenstorrent | tt-metal | 0.16 |
| Tenstorrent | tt-metal | 0.17 |
| Tenstorrent | tt-metal | 0.18 |
| Tenstorrent | tt-metal | 0.19 |
| Tenstorrent | tt-metal | 0.20 |
| Tenstorrent | tt-metal | 0.21 |
| Tenstorrent | tt-metal | 0.22 |
| Tenstorrent | tt-metal | 0.23 |
| Tenstorrent | tt-metal | 0.24 |
| Tenstorrent | tt-metal | 0.25 |
| Tenstorrent | tt-metal | 0.26 |
| Tenstorrent | tt-metal | 0.27 |
| Tenstorrent | tt-metal | 0.28 |
| Tenstorrent | tt-metal | 0.29 |
| Tenstorrent | tt-metal | 0.30 |
| Tenstorrent | tt-metal | 0.31 |
| Tenstorrent | tt-metal | 0.32 |
| Tenstorrent | tt-metal | 0.33 |
| Tenstorrent | tt-metal | 0.34 |
| Tenstorrent | tt-metal | 0.35 |
| Tenstorrent | tt-metal | 0.36 |
| Tenstorrent | tt-metal | 0.37 |
| Tenstorrent | tt-metal | 0.38 |
| Tenstorrent | tt-metal | 0.39 |
| Tenstorrent | tt-metal | 0.40 |
| Tenstorrent | tt-metal | 0.41 |
| Tenstorrent | tt-metal | 0.42 |
| Tenstorrent | tt-metal | 0.43 |
| Tenstorrent | tt-metal | 0.44 |
| Tenstorrent | tt-metal | 0.45 |
| Tenstorrent | tt-metal | 0.46 |
| Tenstorrent | tt-metal | 0.47 |
| Tenstorrent | tt-metal | 0.48 |
| Tenstorrent | tt-metal | 0.49 |
| Tenstorrent | tt-metal | 0.50 |
| Tenstorrent | tt-metal | 0.51 |
| Tenstorrent | tt-metal | 0.52 |
| Tenstorrent | tt-metal | 0.53 |
| Tenstorrent | tt-metal | 0.54 |
| Tenstorrent | tt-metal | 0.55 |
| Tenstorrent | tt-metal | 0.56 |
| Tenstorrent | tt-metal | 0.57 |
| Tenstorrent | tt-metal | 0.58 |
| Tenstorrent | tt-metal | 0.59 |
| Tenstorrent | tt-metal | 0.60 |
| Tenstorrent | tt-metal | 0.61 |
| Tenstorrent | tt-metal | 0.62 |
| Tenstorrent | tt-metal | 0.63 |
| Tenstorrent | tt-metal | 0.64 |
| Tenstorrent | tt-metal | 0.65 |
| Tenstorrent | tt-metal | 0.66 |
| Tenstorrent | tt-metal | 0.67 |
| Tenstorrent | tt-metal | 0.68 |
| Tenstorrent | tt-metal | 0.69 |
| Tenstorrent | tt-metal | 0.70 |
| Tenstorrent | tt-metal | 0.71 |
| Tenstorrent | tt-metal | 0.72 |
| Tenstorrent | tt-metal | 0.73 |
| Tenstorrent | tt-metal | 0.74 |
| Tenstorrent | tt-metal | 0.75 |
| Tenstorrent | tt-metal | 0.76 |
| Tenstorrent | tt-metal | 0.77 |
| Tenstorrent | tt-metal | 0.78 |
| Tenstorrent | tt-metal | 0.79 |
| Tenstorrent | tt-metal | 0.80.0 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-22 | The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. |
