tocsin

CVE-2026-33665

1 advisory.

npm/n8n CVE-2026-33665: high 8.2

n8n: LDAP Email-Based Account Linking Allows Privilege Escalation and Account Takeover

Action: Upgrade n8n to 1.121.0 or later.

npm i n8n@2.4.0
npm i n8n@1.121.0

Affected

introducedfixedlast affected
2.0.0-rc.02.4.0-
01.121.0-

Fixed versions

2.4.01.121.0

Sources

CVE-2026-33665 · published · modified · JSON