n8n data sharing & exposure security checks
External sharing, public links, guest access, retention and data-protection settings that quietly push company data outside the tenant.
On n8n, Black Cat runs 3 checks in this area on every scan. Each one below lists its severity, how to fix it, and the compliance controls it satisfies where a control applies. See what access the n8n connector needs.
Checks (3)
severity: medium n8n Workflow Agent Database Access fix difficulty: medium #
Review database access scope of the workflow
- Open the workflow editor
- Check database node queries for data scope
- Apply read-only credentials where possible
Satisfies: NIS2 Directive NIS2-21.a.3 DORA (SaaS Security) DORA-9.12
severity: medium n8n Workflow Agent File Access fix difficulty: medium #
Review file access scope of the workflow
- Open the workflow editor
- Check file/FTP/cloud storage node configurations
- Restrict paths and permissions
Satisfies: NIS2 Directive NIS2-21.a.3 DORA (SaaS Security) DORA-9.12
severity: high n8n Workflow Agent Code Execution fix difficulty: medium #
Review code and command execution nodes
- Open the workflow editor
- Audit Code and Execute Command node contents
- Replace with safer alternatives where possible
Satisfies: NIS2 Directive NIS2-21.a.3 DORA (SaaS Security) DORA-9.12