diff --git a/CHANGELOG.md b/CHANGELOG.md
index da5c2006..a945b2ed 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -14,6 +14,11 @@ exhaustive.
 
 Planned version: **1.5.2**.
 
+### Changed
+
+- Desktop runtime updated to Electron 44.9.0 (embedded Node 24.22.0), with matching
+  manifest, lockfile and runtime contract pins.
+
 ### Added
 
 - XML and JSON queries can read files and evaluate XPath/JSONPath on a WinRM target, including
diff --git a/src/nodepilot-desktop/package-lock.json b/src/nodepilot-desktop/package-lock.json
index 085c84dd..4d790e30 100644
--- a/src/nodepilot-desktop/package-lock.json
+++ b/src/nodepilot-desktop/package-lock.json
@@ -13,7 +13,7 @@
         "@electron/fuses": "2.1.3",
         "@electron/packager": "20.3.0",
         "@types/node": "^26.6.5",
-        "electron": "44.7.0",
+        "electron": "44.9.0",
         "typescript": "~6.0.2",
         "vitest": "^4.1.11"
       },
@@ -862,9 +862,9 @@
       }
     },
     "node_modules/electron": {
-      "version": "44.7.0",
-      "resolved": "https://registry.npmjs.org/electron/-/electron-44.7.0.tgz",
-      "integrity": "sha512-aUq9/zLAAFYc+a9gy6cd0C3Y/N/RmovLCD8TV8LhIzNhuND6HEgsu96jJz9cbAxvckSPv+Trf2PKEjktoZgFkw==",
+      "version": "44.9.0",
+      "resolved": "https://registry.npmjs.org/electron/-/electron-44.9.0.tgz",
+      "integrity": "sha512-boP8zA5OIoMGYe3uWP4IqB1VJNoEzdHYgcBaVYnd1DBv5TogwXkbM4yJGSfNmYCzalVQ5J3TAIbaKOY+ILTnyg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
diff --git a/src/nodepilot-desktop/package.json b/src/nodepilot-desktop/package.json
index 90b6889f..a74ac1f0 100644
--- a/src/nodepilot-desktop/package.json
+++ b/src/nodepilot-desktop/package.json
@@ -26,7 +26,7 @@
   },
   "dependencies": {},
   "//types-node": [
-    "Electron 44.7.0 bundles Node 24.x. @types/node may be newer for tooling, so",
+    "Electron 44.9.0 bundles Node 24.22.0. @types/node may be newer for tooling, so",
     "runtime-only APIs must still be checked against the embedded Node release."
   ],
   "//archive-security": [
@@ -48,7 +48,7 @@
     "@electron/fuses": "2.1.3",
     "@electron/packager": "20.3.0",
     "@types/node": "^26.6.5",
-    "electron": "44.7.0",
+    "electron": "44.9.0",
     "typescript": "~6.0.2",
     "vitest": "^4.1.11"
   }
diff --git a/src/nodepilot-desktop/src/package-contract.test.ts b/src/nodepilot-desktop/src/package-contract.test.ts
index 1a62bf7f..a9aee349 100644
--- a/src/nodepilot-desktop/src/package-contract.test.ts
+++ b/src/nodepilot-desktop/src/package-contract.test.ts
@@ -24,13 +24,13 @@ function readJson<T>(relativePath: string): T {
 }
 
 describe('desktop runtime dependency contract', () => {
-  it('pins Electron 44.7.0 consistently in the manifest and lockfile', () => {
+  it('pins Electron 44.9.0 consistently in the manifest and lockfile', () => {
     const manifest = readJson<PackageManifest>('../package.json');
     const lock = readJson<PackageLock>('../package-lock.json');
 
-    expect(manifest.devDependencies.electron).toBe('44.7.0');
-    expect(lock.packages[''].devDependencies?.electron).toBe('44.7.0');
-    expect(lock.packages['node_modules/electron'].version).toBe('44.7.0');
+    expect(manifest.devDependencies.electron).toBe('44.9.0');
+    expect(lock.packages[''].devDependencies?.electron).toBe('44.9.0');
+    expect(lock.packages['node_modules/electron'].version).toBe('44.9.0');
   });
 
   // The embedded Node major changes with Electron majors. Naming the pinned version in the note