diff --git a/docker/crd-installer.Dockerfile b/docker/crd-installer.Dockerfile
index 65c1706fc..3ad7b895a 100644
--- a/docker/crd-installer.Dockerfile
+++ b/docker/crd-installer.Dockerfile
@@ -1,5 +1,5 @@
 # Build the crdinstaller binary
-FROM mcr.microsoft.com/oss/go/microsoft/golang:1.26.6-1 AS builder
+FROM mcr.microsoft.com/oss/go/microsoft/golang:1.26.9-1 AS builder
 
 ARG GOOS=linux
 ARG GOARCH=amd64
diff --git a/docker/hub-agent.Dockerfile b/docker/hub-agent.Dockerfile
index 2e42a1de5..296b6165f 100644
--- a/docker/hub-agent.Dockerfile
+++ b/docker/hub-agent.Dockerfile
@@ -8,7 +8,7 @@
 # Segmentation fault" / "cgo: gcc produced no output" in runtime/cgo and net)
 # and, when it did not crash, took over an hour per image. Only the final
 # distroless stage is per-target, and it runs no commands.
-FROM --platform=$BUILDPLATFORM mcr.microsoft.com/oss/go/microsoft/golang:1.26.8-1 AS builder
+FROM --platform=$BUILDPLATFORM mcr.microsoft.com/oss/go/microsoft/golang:1.26.9-1 AS builder
 
 WORKDIR /workspace
 # Copy the Go Modules manifests
diff --git a/docker/member-agent.Dockerfile b/docker/member-agent.Dockerfile
index f095a9adb..ca71cadd3 100644
--- a/docker/member-agent.Dockerfile
+++ b/docker/member-agent.Dockerfile
@@ -8,7 +8,7 @@
 # Segmentation fault" / "cgo: gcc produced no output" in runtime/cgo and net)
 # and, when it did not crash, took over an hour per image. Only the final
 # distroless stage is per-target, and it runs no commands.
-FROM --platform=$BUILDPLATFORM mcr.microsoft.com/oss/go/microsoft/golang:1.26.8-1 AS builder
+FROM --platform=$BUILDPLATFORM mcr.microsoft.com/oss/go/microsoft/golang:1.26.9-1 AS builder
 
 WORKDIR /workspace
 # Copy the Go Modules manifests
diff --git a/docker/refresh-token.Dockerfile b/docker/refresh-token.Dockerfile
index 9ee6e5681..6acb6869c 100644
--- a/docker/refresh-token.Dockerfile
+++ b/docker/refresh-token.Dockerfile
@@ -8,7 +8,7 @@
 # Segmentation fault" / "cgo: gcc produced no output" in runtime/cgo and net)
 # and, when it did not crash, took over an hour per image. Only the final
 # distroless stage is per-target, and it runs no commands.
-FROM --platform=$BUILDPLATFORM mcr.microsoft.com/oss/go/microsoft/golang:1.26.8-1 AS builder
+FROM --platform=$BUILDPLATFORM mcr.microsoft.com/oss/go/microsoft/golang:1.26.9-1 AS builder
 
 WORKDIR /workspace
 # Copy the Go Modules manifests