diff --git a/docker-compose.yml b/docker-compose.yml
index 78645e8..6025430 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,6 +1,6 @@
 services:
   openbao:
-    image: openbao/openbao:2.5.5
+    image: openbao/openbao:2.6.2
     container_name: openbao
     restart: unless-stopped
     # The image entrypoint already runs `bao server -config=/openbao/config`
@@ -32,7 +32,7 @@ services:
   # Minimal sidecar instance that provides transit auto-unseal for the main
   # node above. Shamir-sealed itself; only reachable on the internal network.
   openbao-unsealer:
-    image: openbao/openbao:2.5.5
+    image: openbao/openbao:2.6.2
     container_name: openbao-unsealer
     restart: unless-stopped
     command: server