diff --git a/Cargo.lock b/Cargo.lock
index e54264359..50d55a1ba 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -90,7 +90,7 @@ dependencies = [
  "glob",
  "hex",
  "octocrab",
- "rand 0.8.7",
+ "rand 0.10.2",
  "regex",
  "reqwest",
  "serde",
@@ -3632,7 +3632,7 @@ dependencies = [
  "maestro-context",
  "maestro-runtime-contracts",
  "maestro-sandbox",
- "rand 0.9.5",
+ "rand 0.10.2",
  "regex",
  "serde",
  "serde_json",
@@ -3703,7 +3703,7 @@ dependencies = [
  "dunce",
  "landlock",
  "libc",
- "rand 0.9.5",
+ "rand 0.10.2",
  "regex",
  "seccompiler",
  "serde",
@@ -3826,7 +3826,7 @@ dependencies = [
  "prost-types",
  "protoc-bin-vendored",
  "pulldown-cmark",
- "rand 0.9.5",
+ "rand 0.10.2",
  "ratatui",
  "rcgen",
  "regex",
@@ -4086,7 +4086,7 @@ dependencies = [
  "ed25519-dalek",
  "getrandom 0.2.17",
  "log",
- "rand 0.8.7",
+ "rand 0.8.8",
  "signatory",
 ]
 
@@ -4151,7 +4151,7 @@ version = "0.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "fc895af95856f929163a0aa20c26a78d26bfdc839f51b9d5aa7a5b79e52b7e83"
 dependencies = [
- "rand 0.8.7",
+ "rand 0.8.8",
 ]
 
 [[package]]
@@ -4844,7 +4844,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "3c80231409c20246a13fddb31776fb942c38553c51e871f8cbd687a4cfb5843d"
 dependencies = [
  "phf_shared",
- "rand 0.8.7",
+ "rand 0.8.8",
 ]
 
 [[package]]
@@ -5350,9 +5350,9 @@ checksum = "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf"
 
 [[package]]
 name = "rand"
-version = "0.8.7"
+version = "0.8.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "22f6172bdec972074665ed81ed53b71da00bfc44b65a753cfde883ec4c702a1a"
+checksum = "e058c7de0b26af77780c769414d6257830bb240f3c38477dbc2c16e5f54d6d4c"
 dependencies = [
  "libc",
  "rand_chacha 0.3.1",
@@ -6803,7 +6803,7 @@ dependencies = [
  "futures-sink",
  "http 1.5.0",
  "httparse",
- "rand 0.8.7",
+ "rand 0.8.8",
  "ring",
  "rustls-pki-types",
  "tokio",
diff --git a/Cargo.toml b/Cargo.toml
index 4487ee875..6f92acca4 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -101,7 +101,7 @@ serde_yaml = "0.9"
 sha2 = "0.10"
 similar = "3"
 rayon = "1.10"
-rand = "0.9"
+rand = "0.10"
 thiserror = "2"
 zeroize = "1"
 tempfile = "3"
diff --git a/packages/ambient-agent-rs/Cargo.toml b/packages/ambient-agent-rs/Cargo.toml
index 87bb107c5..f2a34d0ec 100644
--- a/packages/ambient-agent-rs/Cargo.toml
+++ b/packages/ambient-agent-rs/Cargo.toml
@@ -43,7 +43,7 @@ clap.workspace = true
 async-trait = "0.1"
 
 # Utilities
-rand = "0.8"
+rand = "0.10"
 uuid.workspace = true
 chrono = { workspace = true, features = ["serde"] }
 sha2.workspace = true