diff --git a/clusters/main/kubernetes/flux-system/flux/upgradesettings.yaml b/clusters/main/kubernetes/flux-system/flux/upgradesettings.yaml
index 1fa50c1c2..b31f44ea2 100644
--- a/clusters/main/kubernetes/flux-system/flux/upgradesettings.yaml
+++ b/clusters/main/kubernetes/flux-system/flux/upgradesettings.yaml
@@ -7,4 +7,4 @@ data:
   # renovate: datasource=docker depName=ghcr.io/siderolabs/installer
   TALOS_VERSION: v1.12.7
   # renovate: datasource=docker depName=ghcr.io/siderolabs/kubelet
-  KUBERNETES_VERSION: v1.35.4
+  KUBERNETES_VERSION: v1.35.7
diff --git a/clusters/main/talos/talconfig.yaml b/clusters/main/talos/talconfig.yaml
index 17ddea38b..456f7d5bb 100644
--- a/clusters/main/talos/talconfig.yaml
+++ b/clusters/main/talos/talconfig.yaml
@@ -2,7 +2,7 @@ clusterName: ${CLUSTERNAME}
 # renovate: datasource=docker depName=ghcr.io/siderolabs/installer
 talosVersion: v1.12.7
 # renovate: datasource=docker depName=ghcr.io/siderolabs/kubelet
-kubernetesVersion: v1.35.4
+kubernetesVersion: v1.35.7
 endpoint: https://${VIP}:6443
 allowSchedulingOnControlPlanes: true
 additionalMachineCertSans: