diff --git a/Cargo.lock b/Cargo.lock
index 3d3463ceb1..df1c9e6f80 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -11807,7 +11807,7 @@ dependencies = [
  "nix 0.29.0",
  "ntest",
  "ordered-stream",
- "rand 0.8.5",
+ "rand 0.9.1",
  "serde",
  "serde_repr",
  "sha1",
diff --git a/Cargo.toml b/Cargo.toml
index ca543ccfdf..2fd61021a9 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -109,7 +109,7 @@ percent-encoding = "2.2.0"
 portable-pty = "0.8.1"
 r2d2 = "0.8.10"
 r2d2_sqlite = "0.25.0"
-rand = "0.9.0"
+rand = "0.9.1"
 rayon = "1.8.0"
 regex = "1.7.0"
 reqwest = { version = "0.12.14", default-features = false, features = [
diff --git a/crates/chat-cli/Cargo.toml b/crates/chat-cli/Cargo.toml
index 1e7bb1757e..2ed188c04c 100644
--- a/crates/chat-cli/Cargo.toml
+++ b/crates/chat-cli/Cargo.toml
@@ -92,7 +92,7 @@ paste = "1.0.11"
 percent-encoding = "2.2.0"
 r2d2 = "0.8.10"
 r2d2_sqlite = "0.25.0"
-rand = "0.9.0"
+rand = "0.9.1"
 regex = "1.7.0"
 reqwest = { version = "0.12.14", default-features = false, features = [
     "http2",
diff --git a/crates/zbus/Cargo.toml b/crates/zbus/Cargo.toml
index 4114317a22..25f82a0dea 100644
--- a/crates/zbus/Cargo.toml
+++ b/crates/zbus/Cargo.toml
@@ -61,7 +61,7 @@ blocking = { version = "1.6.0", optional = true }
 async-task = { version = "4.7.1", optional = true }
 hex = "0.4.3"
 ordered-stream = "0.2"
-rand = "0.8.5"
+rand = "0.9.1"
 sha1 = { version = "0.10.6", features = ["std"] }
 event-listener = "5.3.0"
 static_assertions = "1.1.0"