crewAI 1.15.7: Security patches and observability improvements
sdksecurityinfrasecurity-advisoryengineerpython-agentic
patch
This release of crewAI addresses critical security vulnerabilities, including a patch for CVE-2026-16796 via an updated bedrock-agentcore dependency. The update also introduces enhanced observability by emitting skill usage events at runtime. These changes are primarily relevant to users of the crewAI framework, especially those concerned with security and monitoring their agent operations.
- →Resolve registry skills through the runtime's CrewAI+ client
- →Recover from the GPT-5.6 tools + reasoning_effort 400
- →Make tool calling work on the Responses API path
- →Route responses-only models instead of failing with 404
- →Bump bedrock-agentcore to patch CVE-2026-16796
Fixes (5) ›
- Resolve registry skills through the runtime's CrewAI+ client
- Recover from the GPT-5.6 tools + reasoning_effort 400
- Make tool calling work on the Responses API path
- Route responses-only models instead of failing with 404
- Bump bedrock-agentcore to patch CVE-2026-16796
Maintenance (1) ›
- Add snapshot and changelog for v1.15.7a1
Read the original announcement →
https://github.com/crewAIInc/crewAI/releases/tag/1.15.7
Related releases
- crewAI 1.15.10 Patch Release CrewAI Releases ·
- LangGraph checkpoint-postgres 3.1.1 update LangGraph Releases ·
- LangGraph checkpoint-sqlite 3.1.1 released LangGraph Releases ·
- adk-python adds async non-blocking tool support Google ADK (Python) Releases ·
- Google ADK Python v2.6.0 adds features, fixes Google ADK (Python) Releases ·
- crewAI 1.15.9: Improved Tool Failure Reporting and Flow Events CrewAI Releases ·