diff --git a/requirements.txt b/requirements.txt
index 8a07c8b..eeed862 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -30,7 +30,7 @@ groq==1.2.0                 # Groq Orpheus TTS (required if using groq provider)
 
 # Auth (Clerk JWT — optional, only if CANVAS_REQUIRE_AUTH=true)
 PyJWT==2.12.1
-cryptography==46.0.7
+cryptography==48.0.0
 
 # Face recognition (optional — adds ~700MB for TensorFlow)
 # Installs on first use if not present. To pre-install: