CVE-2026-113743 Tenstorrent CVE debrief

Who should care

Defenders responsible for Tenstorrent tt-metal installations should assess exposure and potential impact. System administrators and security teams should verify if their systems are using affected versions of tt-metal and prioritize upgrading to the fixed version.

Why it matters

CVE-2026-113743 is a path traversal vulnerability in Tenstorrent tt-metal up to 0.80.0. Defenders should verify exposure, assess impact, and prioritize upgrading to the fixed version.

• Verify exposure of tt-metal installations to this path traversal vulnerability
• Assess potential impact on systems using tt-metal
• Prioritize upgrading affected tt-metal installations to version 0.81.0-dev20261016 or later
• Monitor for potential exploitation attempts

Technical summary

The load_hf_state_dict_filtered function in models/tt_transformers/tt/load_checkpoints.py of Tenstorrent tt-metal up to 0.80.0 is vulnerable to path traversal. The issue arises from improper handling of the weight_map argument, allowing an attacker to manipulate file paths. This vulnerability can be exploited remotely, and a public exploit is available. The affected product is Tenstorrent tt-metal, and the vulnerability has been addressed in version 0.81.0-dev20261016. Defenders should prioritize verifying exposure of tt-metal installations to this path traversal vulnerability and assess the potential impact on their systems.

Defensive priority

Defenders should prioritize verifying exposure of tt-metal installations to this path traversal vulnerability and assess the potential impact on their systems.

Recommended defensive actions

• Verify tt-metal installations for exposure to this path traversal vulnerability
• Assess the potential impact on systems using tt-metal
• Upgrade affected tt-metal installations to version 0.81.0-dev20261016 or later
• Monitor for potential exploitation attempts
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its description, affected versions, and fixed versions. However, the corpus does not establish versions, exploitation, impact, or remediation beyond upgrading to 0.81.0-dev20261016.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.