diff --git a/src/codeprobe/sandbox/Dockerfile.agent b/src/codeprobe/sandbox/Dockerfile.agent
index 9e918434..86222f82 100644
--- a/src/codeprobe/sandbox/Dockerfile.agent
+++ b/src/codeprobe/sandbox/Dockerfile.agent
@@ -8,7 +8,7 @@
 # run with --network=bridge: the agent must reach the model API. Only the
 # slot worktree and the session CLAUDE_CONFIG_DIR are mounted rw; the rest
 # of the container filesystem is throwaway.
-FROM node:22-bookworm-slim@sha256:6c74791e557ce11fc957704f6d4fe134a7bc8d6f5ca4403205b2966bd488f6b3
+FROM node:22.23.4-bookworm-slim@sha256:de170b39439eb0e5a3444ad7d60b015614a381e10fecae2e30ec9e735122f38d
 
 ARG DEBIAN_SNAPSHOT=20260728T000000Z
 ARG CLAUDE_CODE_VERSION=2.1.220