crewAI

v1.15.7 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 11h AI Agents & Assistants

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

agents ai ai-agents aiagentframework llms

Affected surfaces

deps

Summary

AI summary

Bumped bedrock-agentcore to patch CVE-2026-16796.

Full changelog

What's Changed

Bug Fixes

Resolve registry skills through the runtime's CrewAI+ client
Recover from the GPT-5.6 tools + reasoning_effort 400
Make tool calling work on the Responses API path
Route responses-only models instead of failing with 404
Bump bedrock-agentcore to patch CVE-2026-16796

Observability

Emit skill usage events at runtime for observability

Documentation

Add snapshot and changelog for v1.15.7a1

Contributors

@alex-clawd, @joaomdmoura, @lorenzejay

Security Fixes

CVE-2026-16796 — patched by bumping bedrock-agentcore to the fixed version

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track crewAI

Get notified when new releases ship.

About crewAI

Framework for orchestrating role-playing, autonomous AI agents. By fostering collaborative intelligence, CrewAI empowers agents to work together seamlessly, tackling complex tasks.

All releases →