diff --git a/3rdparty/gcp-guest-agent/Dockerfile b/3rdparty/gcp-guest-agent/Dockerfile
index ab437d512..ca7fb8014 100644
--- a/3rdparty/gcp-guest-agent/Dockerfile
+++ b/3rdparty/gcp-guest-agent/Dockerfile
@@ -6,7 +6,7 @@ RUN apt-get update && apt-get install -y \
     git
 
 # Install Go
-ARG GO_VER=1.23.6
+ARG GO_VER=1.24.2
 RUN wget -q https://go.dev/dl/go${GO_VER}.linux-amd64.tar.gz && \
     tar -C /usr/local -xzf go${GO_VER}.linux-amd64.tar.gz && \
     rm go${GO_VER}.linux-amd64.tar.gz
diff --git a/MODULE.bazel b/MODULE.bazel
index 9bd67e799..3648de72e 100644
--- a/MODULE.bazel
+++ b/MODULE.bazel
@@ -22,7 +22,7 @@ go_sdk = use_extension("@io_bazel_rules_go//go:extensions.bzl", "go_sdk")
 go_sdk.download(
     name = "go_sdk",
     patches = ["//3rdparty/bazel/org_golang:go_tls_max_handshake_size.patch"],
-    version = "1.23.6",
+    version = "1.24.2",
 )
 
 python = use_extension("@rules_python//python/extensions:python.bzl", "python")
diff --git a/go.mod b/go.mod
index d8d1a48d1..2146205fa 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/edgelesssys/constellation/v2
 
-go 1.23.6
+go 1.24.2
 
 // TODO(daniel-weisse): revert after merging https://github.com/martinjungblut/go-cryptsetup/pull/16.
 replace github.com/martinjungblut/go-cryptsetup => github.com/daniel-weisse/go-cryptsetup v0.0.0-20230705150314-d8c07bd1723c
diff --git a/go.work b/go.work
index 799457415..c137fb60c 100644
--- a/go.work
+++ b/go.work
@@ -1,6 +1,6 @@
-go 1.23.6
+go 1.24.2
 
-toolchain go1.23.6
+toolchain go1.24.2
 
 use (
 	.
diff --git a/hack/tools/go.mod b/hack/tools/go.mod
index 23cf46207..e11330aed 100644
--- a/hack/tools/go.mod
+++ b/hack/tools/go.mod
@@ -1,6 +1,6 @@
 module github.com/edgelesssys/constellation/v2/hack/tools
 
-go 1.23.6
+go 1.24.2
 
 require (
 	github.com/google/go-licenses v1.6.0