diff --git a/Cargo.lock b/Cargo.lock
index 7fbae25..4edc7ec 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2411,9 +2411,9 @@ dependencies = [
 
 [[package]]
 name = "tokio"
-version = "1.52.1"
+version = "1.52.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b67dee974fe86fd92cc45b7a95fdd2f99a36a6d7b0d431a231178d3d670bbcc6"
+checksum = "8fc7f01b389ac15039e4dc9531aa973a135d7a4135281b12d7c1bc79fd57fffe"
 dependencies = [
  "bytes",
  "libc",
diff --git a/Cargo.toml b/Cargo.toml
index 64acc61..4720091 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -135,7 +135,7 @@ thiserror = "2.0.18"
 # Exact-pinned: Tokio is the async runtime underpinning privilege
 # separation, IPC, and agent coordination. See AGENTS.md "Pin
 # security-critical deps".
-tokio = { version = "=1.52.1", features = [
+tokio = { version = "=1.52.3", features = [
     "rt",
     "rt-multi-thread",
     "net",