crewAI 1.15.7: Security patches and observability improvements
sdksecurityinfrasecurity-advisoryengineerpython-agentic
patch
This release of crewAI addresses critical security vulnerabilities, including a patch for CVE-2026-16796 via an updated bedrock-agentcore dependency. The update also introduces enhanced observability by emitting skill usage events at runtime. These changes are primarily relevant to users of the crewAI framework, especially those concerned with security and monitoring their agent operations.
- →Resolve registry skills through the runtime's CrewAI+ client
- →Recover from the GPT-5.6 tools + reasoning_effort 400
- →Make tool calling work on the Responses API path
- →Route responses-only models instead of failing with 404
- →Bump bedrock-agentcore to patch CVE-2026-16796
Fixes (5) ›
- Resolve registry skills through the runtime's CrewAI+ client
- Recover from the GPT-5.6 tools + reasoning_effort 400
- Make tool calling work on the Responses API path
- Route responses-only models instead of failing with 404
- Bump bedrock-agentcore to patch CVE-2026-16796
Maintenance (1) ›
- Add snapshot and changelog for v1.15.7a1
Read the original announcement →
https://github.com/crewAIInc/crewAI/releases/tag/1.15.7
Related releases
- Pydantic-AI v2.19.0 adds headers and retry_after to ModelHTTPError Pydantic AI Releases ·
- OpenAI Agents Python: Programmatic Tool Calling and SDK Enhancements OpenAI Agents SDK (Python) Releases ·
- pydantic-ai v2.18.0 adds Anthropic/OpenRouter tool support, web access Pydantic AI Releases ·
- crewAI 1.15.6: Bug fixes and documentation updates CrewAI Releases ·
- Pydantic-AI v2.17.0: Cache OTel serialization, support arbitrary fields Pydantic AI Releases ·
- pydantic-ai v2.16.0 adds Model Armor and new Gemini models Pydantic AI Releases ·