diff --git a/docker-compose.override.yml b/docker-compose.override.yml
index 4496ae18f..cdeefb0d0 100644
--- a/docker-compose.override.yml
+++ b/docker-compose.override.yml
@@ -12,6 +12,8 @@ services:
       - ./surfsense_web/.env
     depends_on:
       - backend
+    security_opt:
+      - no-new-privileges:true
     environment:
       - NEXT_PUBLIC_API_URL=${NEXT_PUBLIC_API_URL:-http://backend:8000}
 
@@ -25,6 +27,8 @@ services:
       - db
     env_file:
       - ./surfsense_backend/.env
+    security_opt:
+      - no-new-privileges:true
     environment:
       - DATABASE_URL=postgresql+asyncpg://${POSTGRES_USER:-postgres}:${POSTGRES_PASSWORD:-postgres}@db:5432/${POSTGRES_DB:-surfsense}
       - PYTHONPATH=/app