diff --git a/Dockerfile b/Dockerfile
index caa5fbf5e1..99c6f3f098 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -118,7 +118,7 @@ RUN rm -vf /charts/*.sh /charts/*.md /charts/chart_versions.yaml
 # must be placed in bin/ of the file image and subdirectories of bin/ will be flattened during installation.
 # This means bin/foo/bar will become bin/bar when rke2 installs this to the host
 FROM rancher/hardened-kubernetes:v1.32.2-rke2r1-build20250213 AS kubernetes
-FROM rancher/hardened-containerd:v2.0.2-k3s1-build20250120 AS containerd
+FROM rancher/hardened-containerd:v2.0.2-k3s2-build20250221 AS containerd
 FROM rancher/hardened-crictl:v1.32.0-build20250211 AS crictl
 FROM rancher/hardened-runc:v1.2.4-build20250109 AS runc
 
diff --git a/Dockerfile.windows b/Dockerfile.windows
index 77cdc79f65..41cf6f06e8 100644
--- a/Dockerfile.windows
+++ b/Dockerfile.windows
@@ -38,7 +38,7 @@ RUN curl -sL https://raw.githubusercontent.com/golangci/golangci-lint/master/ins
 WORKDIR /source
 # End Dapper stuff
 
-FROM --platform=$BUILDPLATFORM rancher/hardened-containerd:v2.0.2-k3s1-build20250120-amd64-windows AS containerd
+FROM --platform=$BUILDPLATFORM rancher/hardened-containerd:v2.0.2-k3s2-build20250221-amd64-windows AS containerd
 FROM build as windows-runtime-collect
 ARG KUBERNETES_VERSION=dev