This question is based on false assumptions. The node network does not vote. It exists as a social consensus. The consensus relies on node operators to choose to follow the same rules. In some discussions this is referred to as "supermajority", which is accurate. It is completely inaccurate to believe nodes can vote, or that nodes can be reliably counted. All Bitcoin nodes are independent
The so-called 51% attack scenario is derived from the Satoshi white paper, under the heading "Calculations". This warns that a miner with more than 50% of the hash power can overtake all the other miners and mine blocks containing his own fraudulent transactions. The scenario is a consequence of the "longest chain" principle in the design. When there is a tied mining race, the node network will have a temporary chain tip fork, which is usually resolve din the next block, in favor of the longest chain. Nodes with the shorter chain will perform a chain tip reorg, to resynchronize. A 51% miner can simulate a tied mining race with hash power
Satoshi's scenario describes an attack which replaces one block at a time. The white paper includes some mathematical projections which display that it becomes exponentially more difficult to force chain tip forks more than one block long
It is now known that 51% hash power is not necessary, and that an attacker who shadow-mines a chain tip of multiple blocks secretly, in parallel with the regular mining network can create a chain tip fork of arbitrary length, just by winning one block more quickly than the regular mining network
Shadow mining scenario: acquire at least 15% of the hash rate. Mine in secret, in parallel, for an hour or a few hours. Eventually, the 15% hash power means a 15% chance of winning a block. Do not broadcast the winning block. Keep mining for 10 more blocks, and then broadcast the 11-block tip. The "longest chain" logic in the node software will recognize the attacker's 11 blocks as longer than the regular mining network, and will automatically reorg the chain tip
Attacks like this have been seen several times on Bitcoin Gold and Bitcoin Cash SV