diff --git a/src/ui/requirements.in b/src/ui/requirements.in
index be719ad6d7..3705813dcd 100644
--- a/src/ui/requirements.in
+++ b/src/ui/requirements.in
@@ -4,7 +4,7 @@ certbot==5.5.0
 Flask==3.1.3
 Flask-Login==0.6.3
 Flask-Session[cachelib]==0.8.0
-Flask-WTF==1.2.2
+Flask-WTF==1.3.0
 gunicorn[gthread,http2]==25.1.0
 openpyxl==3.1.5
 passlib==1.7.4
diff --git a/src/ui/requirements.txt b/src/ui/requirements.txt
index 4d1714a651..bf2e82ab81 100644
--- a/src/ui/requirements.txt
+++ b/src/ui/requirements.txt
@@ -504,9 +504,9 @@ flask-session==0.8.0 \
     # via
     #   -r requirements.in
     #   flask-session
-flask-wtf==1.2.2 \
-    --hash=sha256:79d2ee1e436cf570bccb7d916533fa18757a2f18c290accffab1b9a0b684666b \
-    --hash=sha256:e93160c5c5b6b571cf99300b6e01b72f9a101027cab1579901f8b10c5daf0b70
+flask-wtf==1.3.0 \
+    --hash=sha256:61d5dabc50c3df885c297dcbd80810443a5d632106c8a69cab8ce740f0cdd7cc \
+    --hash=sha256:dc5e3a4ce97f75c47bf6c1c72ad2c3b7bdf579a2ed13aebcc5d3d81fe2571160
     # via -r requirements.in
 gunicorn==25.1.0 \
     --hash=sha256:1426611d959fa77e7de89f8c0f32eed6aa03ee735f98c01efba3e281b1c47616 \