diff --git a/requirements.in b/requirements.in
index 06e2af8b..44d2a86f 100644
--- a/requirements.in
+++ b/requirements.in
@@ -15,7 +15,7 @@ openai>=3.3.1                  # OpenAI-compatible API (Claude Code wrapper, Oll
 flask>=3.1.3
 flask-compress>=1.14
 flask-limiter>=3.5.0
-gunicorn==26.1.0
+gunicorn==26.2.0
 requests>=2.34.2
 
 # HTML parsing (pricepertoken.com pricing scraper)
diff --git a/requirements.txt b/requirements.txt
index 552f7452..9573f31c 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -751,9 +751,9 @@ fsspec==2026.3.0 \
     --hash=sha256:1ee6a0e28677557f8c2f994e3eea77db6392b4de9cd1f5d7a9e87a0ae9d01b41 \
     --hash=sha256:d2ceafaad1b3457968ed14efa28798162f1638dbb5d2a6868a2db002a5ee39a4
     # via huggingface-hub
-gunicorn==26.1.0 \
-    --hash=sha256:1413d777bf99d31ebeb08acd354b01f1ecc44db0aa7b811ae7b86c669232e4f7 \
-    --hash=sha256:9f45bcddec5e9dc7a25a3bdccb0c6832f11fd5d4739b1ee36c8d2fec25f1dc86
+gunicorn==26.2.0 \
+    --hash=sha256:62b864895d9ebff0b2f9867ba04fe811c93121596540830c9c916d0769668447 \
+    --hash=sha256:bd249d0b3f7972f7432f0a6b6ff3b3ee2d129f70cd1ff6c09a9dd9e29a2b88e3
     # via -r requirements.in
 h11==0.16.0 \
     --hash=sha256:4e35b956cf45792e4caa5885e69fba00bdbc6ffafbfa020300e549b208ee5ff1 \