LDAP Authentication Vulnerability in n8n Workflow Automation by n8n.io

CVE-2026-33665

What is CVE-2026-33665?

n8n is an open-source workflow automation platform that has a vulnerability associated with its LDAP authentication feature. When LDAP authentication is enabled prior to versions 2.4.0 and 1.121.0, the system allows automatic linking of an LDAP identity to an existing local account if the LDAP email attribute matches that of the local account. Consequently, an authenticated LDAP user can gain unauthorized access to other accounts, including those of administrators, if they control their email attribute. This vulnerability results in a persistent account takeover, as the linkage remains even if the LDAP email is changed back. To mitigate this risk, users are strongly encouraged to upgrade to the patched versions of n8n. Temporary mitigations include disabling LDAP authentication, restricting directory permissions, and auditing linked accounts, though these do not fully eliminate the risk.

References