Telegram Trigger security heads up and easy fix

If you are using a telegram trigger please be aware that everybody knowing or finding your bot name can reach your (active) workflow in n8n. Try in telegram a new chat and search for emailagent, you would be surprised.

An easy fix is to insert a simple if statement asking for your chat id (unique) and I also ask for username. If not do nothing or you can create a log into a google sheet with the ID, username to know when somebody tries to reach your n8n.

Hope that helps.

8 comments