diff --git a/pyproject.toml b/pyproject.toml
index aa7573f..0d99314 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -11,7 +11,7 @@ dependencies = [
     "databricks-sdk>=0.106.0",
     "mlflow-skinny==3.12.0",
     "requests",
-    "cryptography>=46.0.7",
+    "cryptography>=48.0.0",
     # Security floors — make CVE-driven minimums explicit so future resolves
     # can't silently downgrade. See PR description for advisory IDs.
     "gitpython>=3.1.49",
diff --git a/requirements.txt b/requirements.txt
index a009bcc..a44b14c 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -42,7 +42,7 @@ click==8.3.3
     #   uvicorn
 cloudpickle==3.1.2
     # via mlflow-skinny
-cryptography==46.0.7
+cryptography==48.0.0
     # via
     #   coda (pyproject.toml)
     #   google-auth