CrewAI 1.15.17 fixes SSRF checks that weren't re-applied per redirect hop.

That's the classic bypass for any tool that fetches a URL the agent chose: pass the initial check, then redirect somewhere internal. The release also stops using a URL hostname as the MCP HTTP/SSE server_name and closes the agent scope on every failed attempt. (GitHub) If you have any agent tool that follows redirects, go check whether your validation runs once or per hop. Mine ran once.