diff --git a/Dockerfile b/Dockerfile
index aacf5d10..94b04f54 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -6,7 +6,7 @@ COPY crates .
 RUN cargo build --release --target wasm32-wasip1 -p prompt_gateway -p llm_gateway
 RUN cargo build --release -p brightstaff
 
-FROM docker.io/envoyproxy/envoy:v1.34-latest AS envoy
+FROM docker.io/envoyproxy/envoy:v1.36.4  AS envoy
 
 FROM python:3.13.6-slim AS arch
 # Purge PAM to avoid CVE-2025-6020 and install needed tools