crewAI

v1.14.5 Security

This release patches 2 CVEs for security teams tracking exposure across their dependency inventory.

Published 16d AI Agents & Assistants

View tool

2 patched CVEs

Read the diff → Tool health → What is this tool? →

This release patches 2 known CVEs CVE-2023-4863 EPSS 93% CVE-2026-42208 EPSS 57%

2 CVEs patched

Topics

agents ai ai-agents aiagentframework llms

Summary

AI summary

Deprecate CrewAgentExecutor and rename EXASearchTool to ExaSearchTool.

Changes in this release

Type	Severity	Summary	CVE
Feature
Feature	Low	Improve Daytona sandbox tools Improve Daytona sandbox tools Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Feature	Low	Add `restore_from_state_id` kickoff parameter Add `restore_from_state_id` kickoff parameter Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Feature	Low	Add highlights to `ExaSearchTool`, rename from `EXASearchTool` Add highlights to `ExaSearchTool`, rename from `EXASearchTool` Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Deprecation	Low	`CrewAgentExecutor` is deprecated, default Crew agents to `AgentExecutor` `CrewAgentExecutor` is deprecated, default Crew agents to `AgentExecutor` Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low	—
Deprecation	Low	'CrewAgentExecutor' is deprecated; default Crew agents use 'AgentExecutor' 'CrewAgentExecutor' is deprecated; default Crew agents use 'AgentExecutor' Source: granite4.1:30b@2026-05-19-audit Confidence: low	—
Bugfix
Bugfix	Medium	Ensure `skills` loading events for traces Ensure `skills` loading events for traces Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Bugfix	Medium	Prevent `result_as_answer` from returning hook-block or error messages as final answer Prevent `result_as_answer` from returning hook-block or error messages as final answer Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Bugfix	Medium	Fix memory leak in `git.py` by using `cached_property` Fix memory leak in `git.py` by using `cached_property` Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low	—
Bugfix	Medium	Fix memory leak in 'git.py' using 'cached_property' Fix memory leak in 'git.py' using 'cached_property' Source: granite4.1:30b@2026-05-19-audit Confidence: low	—
Bugfix	Low	Surface streamed tool calls when `available_functions` is absent Surface streamed tool calls when `available_functions` is absent Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Bugfix	Low	Correct status endpoint path from `/{kickoff_id}/status` to `/status/{kickoff_id}` Correct status endpoint path from `/{kickoff_id}/status` to `/status/{kickoff_id}` Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Bugfix	Low	Restore missing code block in pt-BR first-flow guide Restore missing code block in pt-BR first-flow guide Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Bugfix	Low	Preserve task outputs across async batch flush Preserve task outputs across async batch flush Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Bugfix	Low	Always restore `task.output_pydantic` in finally block Always restore `task.output_pydantic` in finally block Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Bugfix	Low	Handle `BaseModel` input in `convert_to_model` Handle `BaseModel` input in `convert_to_model` Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Refactor	Low	Extract CLI into standalone `crewai-cli` package Extract CLI into standalone `crewai-cli` package Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—

Full changelog

What's Changed

Features

Deprecate CrewAgentExecutor, default Crew agents to AgentExecutor
Improve Daytona sandbox tools
Add restore_from_state_id kickoff parameter
Add highlights to ExaSearchTool, rename from EXASearchTool

Bug Fixes

Fix memory leak in git.py by using cached_property
Surface streamed tool calls when available_functions is absent
Ensure skills loading events for traces
Correct status endpoint path from /{kickoff_id}/status to /status/{kickoff_id}
Restore missing code block in pt-BR first-flow guide
Prevent result_as_answer from returning hook-block or error messages as final answer
Preserve task outputs across async batch flush
Always restore task.output_pydantic in finally block
Handle BaseModel input in convert_to_model

Documentation

Update changelog and version for v1.14.5
Add OSS upgrade & crew-to-flow migration guide
Document additional env vars for devtools
Add docs for TavilyGetResearch

Refactoring

Extract CLI into standalone crewai-cli package

Contributors

@NIK-TIGER-BILL, @akaKuruma, @cgoeppinger, @github-actions[bot], @greysonlalonde, @heitorado, @irfaan101, @iris-clawd, @lorenzejay, @manisrinivasan2k1, @minasami-pr, @mislavivanda, @theCyberTech, @theishangoswami, @wishhyt

Breaking Changes

Removed `CrewAgentExecutor`; default Crew agents now use `AgentExecutor`.
Renamed `EXASearchTool` to `ExaSearchTool`.

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track crewAI

Get notified when new releases ship.

About crewAI

Framework for orchestrating role-playing, autonomous AI agents. By fostering collaborative intelligence, CrewAI empowers agents to work together seamlessly, tackling complex tasks.

All releases →