Back to the changelog

• Security

  Security pass

  An independent security audit reviewed the whole codebase and this release incorporates its fixes. A SuperAdmin account can no longer be changed, disabled, or deleted by a single tenant's Admin. Cross-organization links (federation) can no longer be established with a forged identity, and a second attempt with the same identity is now rejected instead of going through. An n8n address configured by a tenant can no longer reach the installation's internal services beyond what the administrator intended. The page asking for authorization of an MCP connection now also shows the real destination address, not just the name declared by the client. Webhooks, inbound and outbound, now have rate and count limits, and hide addresses and credentials from anyone who shouldn't see them based on their role. No action required on your part.

• Improvement

  Timeouts always go where you configured them

  When a phase has "On timeout → go to" set to a specific destination, timing out now always lands there, even if a phase rule (including the default one) would have matched in the meantime. Rules still decide the destination only when the timeout is set to "Automatic".

• Improvement

  A pending automatic retry no longer lets the case leave its phase

  A task about to automatically retry after an error now blocks the phase's exit rules until the attempt is settled (success, a final failure, or handing off to human fallback), instead of letting a rule move the case away early.

• Improvement

  An event during the start-confirmation wait is no longer lost

  An event that arrives while a case is awaiting a person's start confirmation is now recorded in the history as "deferred" and applied as soon as the start is confirmed, with no need to raise it a second time.

• Improvement

  Warning when a System One preset changes under a published flow

  Editing a System One preset used by an already-published flow now shows an immediate warning listing the affected flows, so you know right away if a new version is needed to realign them. The preset change itself is not blocked.

• Design

  Minor refinements

  A task's human fallback now also shows the original technical cause of the failure, not just the generic reason. Removing the task filter in the AI Call Log now plays well with the browser's "Back" button. Global search now warns when results exceed the shown limit, instead of silently truncating them. Some numeric fields in Process Maps now correctly disable their button when they hold an invalid value. The Settings → Description panel no longer shows stale text after reopening.