diff --git a/apps/infra/bitwarden-cli.yaml b/apps/infra/bitwarden-cli.yaml
index 7bf0332..f76c76f 100644
--- a/apps/infra/bitwarden-cli.yaml
+++ b/apps/infra/bitwarden-cli.yaml
@@ -19,7 +19,7 @@ spec:
         kubernetes.io/arch: amd64
       containers:
         - name: bitwarden-cli
-          image: ghcr.io/charlesthomas/bitwarden-cli:2026.3.0
+          image: ghcr.io/charlesthomas/bitwarden-cli:2026.7.0
           imagePullPolicy: IfNotPresent
           # Override the baked entrypoint so --disable-origin-protection is
           # actually passed (it was commented out in the image's entrypoint.sh,