diff --git a/Dockerfile b/Dockerfile
index 78ae1a8f..c941df50 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -49,6 +49,13 @@ RUN dnf install -y --nodocs \
     && dnf clean all \
     && update-ca-trust
 
+# CVE-2026-9547: Update curl/libcurl to patched version
+RUN dnf update -y 'curl >= 8.6.0-3' 'libcurl >= 8.6.0-3' \
+    && dnf clean all \
+    && echo "Verifying curl version includes CVE-2026-9547 fix:" \
+    && rpm -q curl libcurl \
+    && curl --version | head -n 1
+
 
 RUN curl -L -X GET https://go.dev/dl/go1.24.1.linux-amd64.tar.gz -o /tmp/go1.24.1.linux-amd64.tar.gz \
     && tar -C /usr/local -xzf /tmp/go1.24.1.linux-amd64.tar.gz \