diff --git a/agents/esm-embed/tools/esm-embed/Dockerfile b/agents/esm-embed/tools/esm-embed/Dockerfile
index feeb909e..34b9bb66 100644
--- a/agents/esm-embed/tools/esm-embed/Dockerfile
+++ b/agents/esm-embed/tools/esm-embed/Dockerfile
@@ -4,7 +4,7 @@
 #
 # Base: NVIDIA CUDA 12.1 runtime on Ubuntu 22.04 (matches PyTorch 2.3 cu121 wheels).
 
-FROM nvidia/cuda:13.4.2-runtime-ubuntu22.04
+FROM nvidia/cuda:13.4.3-runtime-ubuntu22.04
 
 ENV PYTHONUNBUFFERED=1 \
     PYTHONDONTWRITEBYTECODE=1 \
diff --git a/agents/flowblind-research-teammate-v2/tools/flowblind-prepare/Dockerfile b/agents/flowblind-research-teammate-v2/tools/flowblind-prepare/Dockerfile
index 9fc2f8b6..e7c8b06a 100644
--- a/agents/flowblind-research-teammate-v2/tools/flowblind-prepare/Dockerfile
+++ b/agents/flowblind-research-teammate-v2/tools/flowblind-prepare/Dockerfile
@@ -1,7 +1,7 @@
 # Both bases are pinned to their linux/amd64 manifests; build with --platform linux/amd64.
-FROM node:26.11.1-bookworm-slim@sha256:86f07bc9c5dce4578cf37e5a418b7bfc7f817cda25cde66e2b66e95ed86c4567 AS node-runtime
+FROM node:26.12.1-bookworm-slim@sha256:28147155d47dc31abe0a46e0d12b59b2fb3d0a2dcc5dc65fce76a074180b16fe AS node-runtime
 
-FROM python:3.12.14-slim@sha256:2fe5997d249a808b8eeea52c58a1dbffbba28754dc11699ef5c029f2d818ce79
+FROM python:3.15.0-slim@sha256:f5b92f2a669a4c347044f29367f31983280b648250ca94dea66f98c53bc87e58
 
 LABEL org.opencontainers.image.title="FlowBlind prepare study v2"
 LABEL org.opencontainers.image.version="2.0.0"
diff --git a/agents/flowblind-research-teammate-v2/tools/flowblind-run-verify/Dockerfile b/agents/flowblind-research-teammate-v2/tools/flowblind-run-verify/Dockerfile
index f2d6135a..aa0e12f5 100644
--- a/agents/flowblind-research-teammate-v2/tools/flowblind-run-verify/Dockerfile
+++ b/agents/flowblind-research-teammate-v2/tools/flowblind-run-verify/Dockerfile
@@ -1,7 +1,7 @@
 # Both bases are pinned to their linux/amd64 manifests; build with --platform linux/amd64.
-FROM node:26.11.1-bookworm-slim@sha256:86f07bc9c5dce4578cf37e5a418b7bfc7f817cda25cde66e2b66e95ed86c4567 AS node-runtime
+FROM node:26.12.1-bookworm-slim@sha256:28147155d47dc31abe0a46e0d12b59b2fb3d0a2dcc5dc65fce76a074180b16fe AS node-runtime
 
-FROM python:3.12.14-slim@sha256:2fe5997d249a808b8eeea52c58a1dbffbba28754dc11699ef5c029f2d818ce79
+FROM python:3.15.0-slim@sha256:f5b92f2a669a4c347044f29367f31983280b648250ca94dea66f98c53bc87e58
 
 LABEL org.opencontainers.image.title="FlowBlind run and verify study v2"
 LABEL org.opencontainers.image.version="2.0.0"
diff --git a/agents/gromacs/tools/gromacs/Dockerfile b/agents/gromacs/tools/gromacs/Dockerfile
index 711a70a2..13e9b299 100644
--- a/agents/gromacs/tools/gromacs/Dockerfile
+++ b/agents/gromacs/tools/gromacs/Dockerfile
@@ -2,7 +2,7 @@
 # ============================================================================
 # Stage 1: Builder - Build GROMACS with CUDA support
 # ============================================================================
-FROM nvidia/cuda:13.4.2-devel-ubuntu22.04 AS builder
+FROM nvidia/cuda:13.4.3-devel-ubuntu22.04 AS builder
 
 # GROMACS with GPU support - automatically falls back to CPU when no GPU present
 # Compatible with NVIDIA A100 (SM 8.0) and H100 (SM 9.0) GPUs, and CPU-only environments
@@ -78,7 +78,7 @@ RUN set -eux; \
 # ============================================================================
 # Stage 2: Runtime - Minimal image with only runtime dependencies
 # ============================================================================
-FROM nvidia/cuda:13.4.2-devel-ubuntu22.04 AS runtime
+FROM nvidia/cuda:13.4.3-devel-ubuntu22.04 AS runtime
 
 ENV DEBIAN_FRONTEND=noninteractive
 ENV APPS=/opt/apps