Starting with Spring '26 (Flow API version 66), before-save record-triggered flows that attempt to update fields will fail with the error INVALID_FIELD_FOR_INSERT_UPDATE: Invalid target field for field update when the initiating API call uses an API version older than the version in which the target field was introduced.
This is expected behavior and not a bug. Starting with Flow API v66, the platform enforces version-specific metadata and field accessibility constraints at the commit layer — meaning a flow can no longer write to a field that wasn't accessible in the API version used by the calling client.
Example: If a field was introduced in API v46 (Summer '19), any REST API call made at v45 or earlier will trigger this error when a before-save flow (v66+) attempts to update that field.
Spring'26 flow version updates.
"Record-triggered flows that run before records are saved now respect the internal writeable status of non-insertable fields. If existing flows try to update fields that aren’t editable, this error message appears: Invalid target field for field update."
Example Fields (introduced in API v46 / Summer '19):
UserPreferencesReceiveNoNotificationsAsApproverUserPreferencesReceiveNotificationsAsDelegatedApprover
Symptoms
You may observe one or more of the following:
Invalid target field for field update (errorCode: INVALID_FIELD_FOR_INSERT_UPDATE) when updating a field via a REST API callerRoot Cause
Prior to Flow API v66, before-save flows could update fields regardless of whether those fields were accessible in the calling client's API version. This was a platform-level security/access bug.
Flow API v66 (Spring '26) introduced a fix that added an explicit check: if a field is not accessible in the API version used by the calling client, the platform will reject the write at the commit layer with INVALID_FIELD_FOR_INSERT_UPDATE. The fix is API-versioned, meaning it only applies when the flow is running at v66 or higher.
005389121

We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.