diff --git a/images/sandbox-agent/Dockerfile b/images/sandbox-agent/Dockerfile
index 19206b1..d00abd5 100644
--- a/images/sandbox-agent/Dockerfile
+++ b/images/sandbox-agent/Dockerfile
@@ -1,7 +1,7 @@
 FROM ubuntu:24.04@sha256:4fbb8e6a8395de5a7550b33509421a2bafbc0aab6c06ba2cef9ebffbc7092d90
 
 # renovate: datasource=node-version depName=node
-ARG NODE_VERSION=24.18.0
+ARG NODE_VERSION=24.22.1
 # Node ships an older bundled npm whose own vendored deps carry known CVEs;
 # upgrading npm itself is the only way to move them.
 # renovate: datasource=npm depName=npm