diff --git a/Cargo.lock b/Cargo.lock
index 8dcf199e7..9504a9a6a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1959,7 +1959,7 @@ dependencies = [
  "itertools 0.13.0",
  "lazy_static",
  "log",
- "rand 0.9.2",
+ "rand 0.9.4",
  "rand_seeder",
  "regex",
  "serde",
@@ -6820,7 +6820,7 @@ dependencies = [
  "num-iter",
  "num-traits",
  "once_cell",
- "rand 0.9.2",
+ "rand 0.9.4",
  "serde",
  "smallvec",
 ]
@@ -6892,7 +6892,7 @@ version = "0.7.7"
 dependencies = [
  "candid",
  "ic-agent 0.39.3",
- "rand 0.9.2",
+ "rand 0.9.4",
  "reqwest",
  "serde",
  "url",
@@ -7020,7 +7020,7 @@ dependencies = [
  "glob",
  "opentelemetry",
  "percent-encoding",
- "rand 0.9.2",
+ "rand 0.9.4",
  "serde_json",
  "thiserror 2.0.18",
  "tracing",
@@ -7756,7 +7756,7 @@ dependencies = [
  "bytes",
  "getrandom 0.3.4",
  "lru-slab",
- "rand 0.9.2",
+ "rand 0.9.4",
  "ring",
  "rustc-hash",
  "rustls",
@@ -7822,9 +7822,9 @@ dependencies = [
 
 [[package]]
 name = "rand"
-version = "0.9.2"
+version = "0.9.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1"
+checksum = "44c5af06bb1b7d3216d91932aed5265164bf384dc89cd6ba05cf59a35f5f76ea"
 dependencies = [
  "rand_chacha 0.9.0",
  "rand_core 0.9.5",
@@ -8111,7 +8111,7 @@ version = "2.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "1cab9bd343c737660e523ee69f788018f3db686d537d2fd0f99c9f747c1bda4f"
 dependencies = [
- "rand 0.9.2",
+ "rand 0.9.4",
 ]
 
 [[package]]
@@ -9829,7 +9829,7 @@ dependencies = [
  "http 1.4.0",
  "httparse",
  "log",
- "rand 0.9.2",
+ "rand 0.9.4",
  "sha1",
  "thiserror 2.0.18",
  "utf-8",
diff --git a/Cargo.toml b/Cargo.toml
index 2a2474216..4e48d6922 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -161,7 +161,7 @@ prometheus-http-query = { version = "0.8.3", default-features = false, features
 ] }
 prometheus = { version = "0.14.0", features = ["process"] }
 prost = "0.13"
-rand = { version = "0.9.2", features = ["std_rng"] }
+rand = { version = "0.9.3", features = ["std_rng"] }
 rand_seeder = "0.3.0"
 regex = "1.11.2"
 registry-canister = { git = "https://github.com/dfinity/ic.git", rev = "ebb18a0983f28f1882b9957e99f072695f43141e" }