PT-2026-28091 · N8N · N8N

Published 2026-03-25 · Updated 2026-03-26 · CVE-2026-33751

Positive Technologies (AI Summary)

CVSS v4.0

6.3

Medium

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.27 n8n versions prior to 2.13.3 n8n versions prior to 2.14.1

Description n8n is a workflow automation platform. A flaw in the LDAP node's filter escape logic allows LDAP metacharacters to pass through unescaped when user-controlled input is interpolated into LDAP search filters. If a workflow uses the LDAP node with user-controlled input passed via expressions into the search parameters, an attacker could manipulate the constructed filter to retrieve unintended LDAP records or bypass authentication checks. Exploitation requires a specific workflow configuration where the LDAP node is used with user-controlled input passed via expressions. The issue affects workflows where external user input is passed via expressions into the LDAP node's search parameters.

Recommendations Upgrade to n8n version 1.123.27 or later. Upgrade to n8n version 2.13.3 or later. Upgrade to n8n version 2.14.1 or later. If upgrading is not immediately possible, limit workflow creation and editing permissions to fully trusted users only. If upgrading is not immediately possible, disable the LDAP node by adding n8n-nodes-base.ldap to the NODES EXCLUDE environment variable. If upgrading is not immediately possible, avoid passing unvalidated external user input into LDAP node search parameters via expressions.

Exploit

Fix

Weakness Enumeration

CWE-90

Related Identifiers

CVE-2026-33751

GHSA-W83Q-MCMX-MH42

Affected Products

N8N

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33751.json · Exploit
• https://github.com/n8n-io/n8n/security/advisories/GHSA-w83q-mcmx-mh42 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-33751 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-33751 · Security Note
• https://osv.dev/vulnerability/GHSA-w83q-mcmx-mh42 · Vendor Advisory
• https://github.com/n8n-io/n8n · Note
• https://twitter.com/algonovalabs/status/2036940619516699009 · Twitter Post
• https://twitter.com/CVEnew/status/2036911808708239629 · Twitter Post
• https://twitter.com/cyberbivash/status/2036908683137896462 · Twitter Post