n8n access control & privilege security checks
Admin roles, standing privileges, permission scopes and policy enforcement — the settings that decide how much damage one compromised account can do.
On n8n, Black Cat runs 3 checks in this area on every scan. Each one below lists its severity, how to fix it, and the compliance controls it satisfies where a control applies. See what access the n8n connector needs.
Checks (3)
severity: medium n8n Workflow Agent Excessive Credentials fix difficulty: medium #
Reduce the number of credentials used by the workflow
- Open n8n > Workflows > select the workflow
- Review each credential reference
- Remove unnecessary credential bindings
Satisfies: NIS2 Directive NIS2-21.i.4 DORA (SaaS Security) DORA-9.3
severity: high n8n Workflow Agent Sensitive Credential fix difficulty: medium #
Review and restrict access to sensitive credentials
- Open n8n > Credentials
- Identify sensitive credentials (database, SSH, cloud)
- Apply least-privilege principle to credential scope
Satisfies: NIS2 Directive NIS2-21.i.4 DORA (SaaS Security) DORA-9.3
severity: medium n8n Workflow Agent HTTP Request Node fix difficulty: easy #
Review HTTP Request node destinations
- Open the workflow editor
- Check each HTTP Request node URL
- Ensure requests go to trusted endpoints only
Satisfies: NIS2 Directive NIS2-21.i.4 DORA (SaaS Security) DORA-9.3