diff --git a/.github/workflows/verify-ezvpn-commit.yml b/.github/workflows/verify-ezvpn-commit.yml
index bcd56a4..e7f5444 100644
--- a/.github/workflows/verify-ezvpn-commit.yml
+++ b/.github/workflows/verify-ezvpn-commit.yml
@@ -17,7 +17,7 @@ on:
       ezvpn_ref:
         description: "ezvpn git ref (commit SHA / branch / tag) to build against"
         required: true
-        default: "ee4f4294f073ba09fc7fef541ef8f17517e74a46"
+        default: "9410b3ecca8153060d696a9af1f7bf17e3e13ebb"
       ezvpn_repo:
         description: "ezvpn repository (owner/name)"
         required: true
diff --git a/native/native.targets b/native/native.targets
index ed36d3b..6339835 100644
--- a/native/native.targets
+++ b/native/native.targets
@@ -32,10 +32,10 @@
          next to the app's own version (EzvpnAppVersion in Directory.Build.props,
          which is independent of this pin). A local core build (EZVPN_LOCAL_DLL)
          still reports the pinned number: the local DLL carries none. -->
-    <EzvpnReleaseTag Condition="'$(EzvpnReleaseTag)' == ''">v0.0.44</EzvpnReleaseTag>
+    <EzvpnReleaseTag Condition="'$(EzvpnReleaseTag)' == ''">v0.0.46</EzvpnReleaseTag>
     <EzvpnCoreVersion>$(EzvpnReleaseTag.TrimStart('v'))</EzvpnCoreVersion>
     <EzvpnDllZipUrl>https://github.com/flexaccessdev/ezvpn/releases/download/$(EzvpnReleaseTag)/ezvpn-windows.dll.zip</EzvpnDllZipUrl>
-    <EzvpnDllZipSha256>8266f394ec55b0bffcd6ed283f2778fdd43c7c130fd1f92a8a6903fde406111e</EzvpnDllZipSha256>
+    <EzvpnDllZipSha256>da66a6600271a43f708932a88fbf8cf60202ca3546f274eaa8fa9163baf96914</EzvpnDllZipSha256>
 
     <!-- Local core build used when EZVPN_LOCAL_DLL=1 (see ..\ezvpn\build-windows.ps1).
          In that mode ezvpn.dll is consumed straight from the sibling dist — it is