v1.2.11

roboflow/inferencev1.2.11May 27, 2026by grzegorz-roboflow

AI Summary

This release focuses on security and stability, hardening auth middleware against CVE-2026-48710 and fixing TorchScript serialization behind a global lock. It also fixes the SAM3 visual_segment adapter and updates requirements on inference_models.

Key Highlights

Security fix: Hardened auth middleware against Starlette BadHost (CVE-2026-48710).
Fixed TorchScript serialization race condition with a global lock.
Fixed SAM3 visual_segment adapter flat point sentinel issue.

Full Release Notes

## What's Changed
* Update requirements on inference_models by @grzegorz-roboflow in https://github.com/roboflow/inference/pull/2370
* fix: serialize TorchScript load/script behind a global lock by @grzegorz-roboflow in https://github.com/roboflow/inference/pull/2373
* fix: harden auth middleware against Starlette BadHost (CVE-2026-48710) by @yeldarby in https://github.com/roboflow/inference/pull/2375
* fix: drop flat point sentinel in SAM3 visual_segment adapter by @grzegorz-roboflow in https://github.com/roboflow/inference/pull/2376


**Full Changelog**: https://github.com/roboflow/inference/compare/v1.2.10...v1.2.11