diff --git a/package-lock.json b/package-lock.json
index fe2d1b28..f20cbbde 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -11284,9 +11284,9 @@
       }
     },
     "node_modules/zod": {
-      "version": "4.6.5",
-      "resolved": "https://registry.npmjs.org/zod/-/zod-4.6.5.tgz",
-      "integrity": "sha512-v5l/aFXZQeai4awLbOpSoHecE9UiMrnfx75tEXLjNonXVARxQ5mOeipTjROUchszUNCqnE+hqAMujRsRHsut2Q==",
+      "version": "4.6.7",
+      "resolved": "https://registry.npmjs.org/zod/-/zod-4.6.7.tgz",
+      "integrity": "sha512-g8W2D2kU6a8untc053fX1uVBKzM7yqAxW/3zwk83+6RyF2+SKOuV+c0wBDhUwzV1PaGapmZH+rmcUzPf+3CGwg==",
       "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/colinhacks"
@@ -11315,7 +11315,7 @@
         "turndown-plugin-gfm": "^1.0.2",
         "undici": "^7.30.0",
         "yaml": "^2.9.1",
-        "zod": "^4.6.5"
+        "zod": "^4.6.7"
       },
       "bin": {
         "openspec-ui-cli": "dist/cli.js"
@@ -11929,7 +11929,7 @@
         "turndown-plugin-gfm": "^1.0.2",
         "undici": "^7.30.0",
         "yaml": "^2.9.1",
-        "zod": "^4.6.5"
+        "zod": "^4.6.7"
       },
       "devDependencies": {
         "@types/cross-spawn": "^6.0.6",
diff --git a/packages/cli/package.json b/packages/cli/package.json
index 68e809e4..12e14f28 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -34,7 +34,7 @@
     "turndown-plugin-gfm": "^1.0.2",
     "undici": "^7.30.0",
     "yaml": "^2.9.1",
-    "zod": "^4.6.5"
+    "zod": "^4.6.7"
   },
   "devDependencies": {
     "@openspec-ui/core": "*",
diff --git a/packages/core/package.json b/packages/core/package.json
index d3e8556d..069a99ab 100644
--- a/packages/core/package.json
+++ b/packages/core/package.json
@@ -24,7 +24,7 @@
     "turndown-plugin-gfm": "^1.0.2",
     "undici": "^7.30.0",
     "yaml": "^2.9.1",
-    "zod": "^4.6.5"
+    "zod": "^4.6.7"
   },
   "devDependencies": {
     "@types/cross-spawn": "^6.0.6",