diff --git a/3rdparty/gcp-guest-agent/Dockerfile b/3rdparty/gcp-guest-agent/Dockerfile
index f8fa7cfb5..09f18737f 100644
--- a/3rdparty/gcp-guest-agent/Dockerfile
+++ b/3rdparty/gcp-guest-agent/Dockerfile
@@ -6,7 +6,7 @@ RUN apt-get update && apt-get install -y \
     git
 
 # Install Go
-ARG GO_VER=1.24.4
+ARG GO_VER=1.24.6
 RUN wget -q https://go.dev/dl/go${GO_VER}.linux-amd64.tar.gz && \
     tar -C /usr/local -xzf go${GO_VER}.linux-amd64.tar.gz && \
     rm go${GO_VER}.linux-amd64.tar.gz
diff --git a/MODULE.bazel b/MODULE.bazel
index 01097d490..9444db741 100644
--- a/MODULE.bazel
+++ b/MODULE.bazel
@@ -23,7 +23,7 @@ go_sdk = use_extension("@io_bazel_rules_go//go:extensions.bzl", "go_sdk")
 go_sdk.download(
     name = "go_sdk",
     patches = ["//3rdparty/bazel/org_golang:go_tls_max_handshake_size.patch"],
-    version = "1.24.4",
+    version = "1.24.6",
 )
 
 python = use_extension("@rules_python//python/extensions:python.bzl", "python")
diff --git a/go.mod b/go.mod
index 82e6194be..f9ced7a3a 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/edgelesssys/constellation/v2
 
-go 1.24.4
+go 1.24.6
 
 // TODO(daniel-weisse): revert after merging https://github.com/martinjungblut/go-cryptsetup/pull/16.
 replace github.com/martinjungblut/go-cryptsetup => github.com/daniel-weisse/go-cryptsetup v0.0.0-20230705150314-d8c07bd1723c
diff --git a/go.work b/go.work
index 0d9909f84..22c609654 100644
--- a/go.work
+++ b/go.work
@@ -1,6 +1,6 @@
-go 1.24.4
+go 1.24.6
 
-toolchain go1.24.4
+toolchain go1.24.6
 
 use (
 	.
diff --git a/hack/tools/go.mod b/hack/tools/go.mod
index 0655ebf97..d300a6917 100644
--- a/hack/tools/go.mod
+++ b/hack/tools/go.mod
@@ -1,6 +1,6 @@
 module github.com/edgelesssys/constellation/v2/hack/tools
 
-go 1.24.4
+go 1.24.6
 
 require (
 	github.com/google/go-licenses v1.6.0