diff --git a/Cargo.lock b/Cargo.lock
index 0aaac540b..8be4b6c63 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2253,6 +2253,18 @@ dependencies = [
  "wasm-bindgen",
 ]
 
+[[package]]
+name = "getrandom"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "26145e563e54f2cadc477553f1ec5ee650b00862f0a58bcd12cbdc5f0ea2d2f4"
+dependencies = [
+ "cfg-if 1.0.0",
+ "libc",
+ "r-efi",
+ "wasi 0.14.2+wasi-0.2.4",
+]
+
 [[package]]
 name = "gimli"
 version = "0.28.0"
@@ -4226,6 +4238,12 @@ dependencies = [
  "proc-macro2",
 ]
 
+[[package]]
+name = "r-efi"
+version = "5.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
+
 [[package]]
 name = "rand"
 version = "0.7.3"
@@ -4250,6 +4268,16 @@ dependencies = [
  "rand_core 0.6.4",
 ]
 
+[[package]]
+name = "rand"
+version = "0.9.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1"
+dependencies = [
+ "rand_chacha 0.9.0",
+ "rand_core 0.9.3",
+]
+
 [[package]]
 name = "rand_chacha"
 version = "0.2.2"
@@ -4270,6 +4298,16 @@ dependencies = [
  "rand_core 0.6.4",
 ]
 
+[[package]]
+name = "rand_chacha"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3022b5f1df60f26e1ffddd6c66e8aa15de382ae63b3a0c1bfc0e4d3e3f325cb"
+dependencies = [
+ "ppv-lite86",
+ "rand_core 0.9.3",
+]
+
 [[package]]
 name = "rand_core"
 version = "0.5.1"
@@ -4288,6 +4326,15 @@ dependencies = [
  "getrandom 0.2.10",
 ]
 
+[[package]]
+name = "rand_core"
+version = "0.9.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "99d9a13982dcf210057a8a78572b2217b667c3beacbf3a0d8b454f6f82837d38"
+dependencies = [
+ "getrandom 0.3.3",
+]
+
 [[package]]
 name = "rand_distr"
 version = "0.4.3"
@@ -7818,7 +7865,7 @@ name = "spl-concurrent-merkle-tree"
 version = "0.4.0"
 dependencies = [
  "bytemuck",
- "rand 0.8.5",
+ "rand 0.9.2",
  "rand_distr",
  "solana-program",
  "spl-merkle-tree-reference",
@@ -8326,7 +8373,7 @@ dependencies = [
  "num-derive",
  "num-traits",
  "num_enum",
- "rand 0.8.5",
+ "rand 0.9.2",
  "solana-program",
  "solana-program-test",
  "solana-sdk",
@@ -8383,7 +8430,7 @@ dependencies = [
  "num-derive",
  "num-traits",
  "num_enum",
- "rand 0.8.5",
+ "rand 0.9.2",
  "serde",
  "serde_bytes",
  "serde_derive",
@@ -10144,6 +10191,15 @@ version = "0.11.0+wasi-snapshot-preview1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9c8d87e72b64a3b4db28d11ce29237c246188f4f51057d65a7eab63b7987e423"
 
+[[package]]
+name = "wasi"
+version = "0.14.2+wasi-0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9683f9a5a998d873c0d21fcbe3c083009670149a8fab228644b8bd36b2c48cb3"
+dependencies = [
+ "wit-bindgen-rt",
+]
+
 [[package]]
 name = "wasm-bindgen"
 version = "0.2.95"
@@ -10466,6 +10522,15 @@ dependencies = [
  "windows-sys 0.48.0",
 ]
 
+[[package]]
+name = "wit-bindgen-rt"
+version = "0.39.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6f42320e61fe2cfd34354ecb597f86f413484a798ba44a8ca1165c58d42da6c1"
+dependencies = [
+ "bitflags 2.6.0",
+]
+
 [[package]]
 name = "x509-parser"
 version = "0.14.0"
diff --git a/libraries/concurrent-merkle-tree/Cargo.toml b/libraries/concurrent-merkle-tree/Cargo.toml
index a94f5e532..0330d2695 100644
--- a/libraries/concurrent-merkle-tree/Cargo.toml
+++ b/libraries/concurrent-merkle-tree/Cargo.toml
@@ -18,7 +18,7 @@ thiserror = "2.0.9"
 
 [dev-dependencies]
 rand_distr = "0.4.3"
-rand = "0.8"
+rand = "0.9"
 spl-merkle-tree-reference = { version = "0.1.0", path = "../merkle-tree-reference" }
 tokio = { version = "1.42", features = ["full"] }
 
diff --git a/single-pool/program/Cargo.toml b/single-pool/program/Cargo.toml
index f7c1dd9b1..e3f0387e5 100644
--- a/single-pool/program/Cargo.toml
+++ b/single-pool/program/Cargo.toml
@@ -34,7 +34,7 @@ spl-associated-token-account = { version = "6.0.0", path = "../../associated-tok
 spl-associated-token-account-client = { version = "2.0.0", path = "../../associated-token-account/client" }
 test-case = "3.3"
 bincode = "1.3.1"
-rand = "0.8.5"
+rand = "0.9.2"
 approx = "0.5.1"
 
 [lib]
diff --git a/slashing/program/Cargo.toml b/slashing/program/Cargo.toml
index fd135217b..d91d0ef91 100644
--- a/slashing/program/Cargo.toml
+++ b/slashing/program/Cargo.toml
@@ -36,7 +36,7 @@ solana-ledger = "2.1.0"
 solana-entry = "2.1.0"
 solana-client = "2.1.0"
 spl-record = { version = "0.3.0", path = "../../record/program" }
-rand = "0.8.5"
+rand = "0.9.2"
 
 [lib]
 crate-type = ["cdylib", "lib"]