CVE-2026-113743

A weakness has been identified in Tenstorrent tt-metal up to 0.80.0. The affected element is the function load hf state dict filtered of the file models/tt transformers/tt/load checkpoints.py. This manipulation of the argument weight map causes path traversal. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.81.0-dev20261016 is sufficient to fix this issue. Patch name: 4851ccf347f6903c3d819eed60705600386e52c3. It is suggested to upgrade the affected component.