diff --git a/services/agent/Dockerfile.sandbox b/services/agent/Dockerfile.sandbox
index 648d389..337c0a4 100644
--- a/services/agent/Dockerfile.sandbox
+++ b/services/agent/Dockerfile.sandbox
@@ -1,4 +1,4 @@
-FROM docker.io/library/alpine:3.24.1@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b AS build
+FROM docker.io/library/alpine:3.24.3@sha256:be2656061b536c1883c4034790e21d0a09c5aaaf51968b89368a3c0371ea2c9a AS build
 
 # hadolint ignore=DL3002
 USER root
@@ -42,7 +42,7 @@ RUN pip install --no-cache-dir --require-hashes -r /app/requirements.lock && \
         "${VENV_SITE_PACKAGES}"/wheel-*.dist-info && \
     chown -R 65534:65534 /app "${VIRTUAL_ENV}" "${PREFIX}"
 
-FROM docker.io/library/alpine:3.24.1@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b AS runtime-base
+FROM docker.io/library/alpine:3.24.3@sha256:be2656061b536c1883c4034790e21d0a09c5aaaf51968b89368a3c0371ea2c9a AS runtime-base
 
 RUN apk add --no-cache \
         bzip2 \