# WorkflowGen v9.6.1

**URL:** <https://discuss.workflowgen.com/t/workflowgen-v9-6-1/2364>\
**Category:** Release Notes & Downloads\
**Created:** [July 31, 2026, 5:39pm UTC](https://discuss.workflowgen.com/t/workflowgen-v9-6-1/2364 "2026-07-31T17:39:50Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![wfg-admin](https://yyz2.discourse-cdn.com/flex030/user_avatar/discuss.workflowgen.com/wfg-admin/32/714_2.png) [@wfg-admin](https://discuss.workflowgen.com/u/wfg-admin)\
**Post date:** [July 31, 2026, 5:39pm UTC](https://discuss.workflowgen.com/t/workflowgen-v9-6-1/2364/1 "2026-07-31T17:39:50Z")

</div>

This maintenance release adds configurable PDF upload protection and resolves targeted User Portal and Administration issues affecting error pages, saved views, long follow-up links, dark-theme global-list controls, and row reordering.

### Important

- After upgrading, set `ApplicationDefaultFileUploadPdfSecurityProfile` to `Compatibility` or `Strict` to enable PDF-specific validation. `Off`, missing, blank, or unknown values disable this protection.

### Security

- **Bug (#4847, #4859):** Added configurable active-content and structural validation for PDFs uploaded through WorkflowGen forms and corrected validation of malformed files, postback attachments, and same-name replacements. The default `Compatibility` profile blocks detected active content and malformed PDFs while allowing encrypted PDFs, XFA, and object streams; `Strict` also blocks those formats. API, remote-launch, and administration process-data uploads are unchanged.

- **Update:** Updated the bundled and supported Node.js runtime to [22.23.2 LTS](https://nodejs.org/en/blog/release/v22.23.2/) for the July 2026 security fixes.

### Portal

- **Bug (#4827):** Kept the User Portal navigation and dashboard visible when action launch or access errors occur.

- **Bug (#4842):** Restored bulk selection for saved views.

- **Bug (#4856):** Restored automatic refresh for request and action saved-view dashboard popups and kept Advanced View result counts synchronized after refreshes.

- **Bug (#4868):** Kept long detected URLs, email addresses, and other links within request and action follow-up data cards.

### Administration

- **Bug (#4848):** Improved Global Lists editor icon visibility in dark theme.

- **Bug (#4851):** Preserved Global Lists row values when reordering a row while another field is focused.

- **Bug (#4872):** Corrected condition and exception editor closing behavior so saved changes are applied correctly and discarded edits do not reappear later.

### WorkflowGen MCP Server Preview

- **Security (#4709):** Strengthened OAuth security for the WorkflowGen MCP Server Preview.

- **Security:** Updated WorkflowGen MCP Server dependencies to address known security vulnerabilities.

- **Bug:** Fixed MCP file imports when allowed folders are configured using relative paths.

### Notes

- Node.js modules are `GraphQL v5.4.4`, `Webhooks v6.3.4`, `Auth v3.3.5`, `SCIM v3.3.4`, and `MCP v0.1.1`. All WorkflowGen Node.js applications require **Node.js 22.23.2 LTS**.

- The WorkflowGen MCP Server remains in Preview.

- For background on earlier enhancements and major features, refer to the [WorkflowGen 9.6.0](https://discuss.workflowgen.com/t/workflowgen-v9-6-0/2362) release notes.

### Installation Packs

[WorkflowGen 9.6.1 (Upgrade)](https://github.com/advantys/workflowgen-releases/releases/download/9.6.1/update.zip)  
[WorkflowGen 9.6.1 (Clean Install - PowerShell)](https://github.com/advantys/workflowgen-releases/releases/download/9.6.1/powershell-setup-9.6.1.zip)  
[WorkflowGen 9.6.1 (Clean Install - manual)](https://github.com/advantys/workflowgen-releases/releases/download/9.6.1/manual.zip)

### Documentation

WorkflowGen 9.6.1 Upgrade Guide: [English](https://docs.workflowgen.com/upgrade/9.6.1) - [Français](https://docs.workflowgen.com/upgrade-fr/9.6.1)  
WorkflowGen 9.6 PowerShell Installation: [English](https://docs.workflowgen.com/tech/9.6/setup/powershell-installation) - [Français](https://docs.workflowgen.com/tech-fr/9.6/configuration/installation-powershell)  
WorkflowGen 9.6 Manual Installation: [English](https://docs.workflowgen.com/tech/9.6/setup/manual-installation) - [Français](https://docs.workflowgen.com/tech-fr/9.6/configuration/installation-manuelle)  
WorkflowGen 9.6 Technical Guide: [English](https://docs.workflowgen.com/tech/9.6) - [Français](https://docs.workflowgen.com/tech-fr/9.6)  
WorkflowGen 9.6 Administration Guide: [English](https://docs.workflowgen.com/admin/9.6) - [Français](https://docs.workflowgen.com/admin-fr/9.6)  
WorkflowGen 9.6 User Portal Guide: [English](https://docs.workflowgen.com/portal/9.6) - [Français](https://docs.workflowgen.com/portal-fr/9.6)  
WorkflowGen 9.6 Integration Guide: [English](https://docs.workflowgen.com/integration/9.6)  
WorkflowGen 9.6 for Azure: [English](https://docs.workflowgen.com/azure/9.6) - [Français](https://docs.workflowgen.com/azure-fr/9.6)  
WorkflowGen 9.x for Docker: [English](https://docs.workflowgen.com/docker) - [Français](https://docs.workflowgen.com/docker-fr)  
WorkflowGen Documentation: [English](https://docs.workflowgen.com/documentation) - [Français](https://docs.workflowgen.com/documentation-fr)

---

<div class="post-metadata">

**Author:** ![jianan.hsu](https://yyz2.discourse-cdn.com/flex030/user_avatar/discuss.workflowgen.com/jianan.hsu/32/411_2.png) [@jianan.hsu](https://discuss.workflowgen.com/u/jianan.hsu)\
**Post date:** [July 31, 2026, 5:54pm UTC](https://discuss.workflowgen.com/t/workflowgen-v9-6-1/2364/2 "2026-07-31T17:54:31Z")

</div>



---

<div class="post-metadata">

**Author:** ![jianan.hsu](https://yyz2.discourse-cdn.com/flex030/user_avatar/discuss.workflowgen.com/jianan.hsu/32/411_2.png) [@jianan.hsu](https://discuss.workflowgen.com/u/jianan.hsu)\
**Post date:** [September 2, 2026, 5:36pm UTC](https://discuss.workflowgen.com/t/workflowgen-v9-6-1/2364/3 "2026-09-02T17:36:27Z")

</div>


