diff --git a/package-lock.json b/package-lock.json
index 05ac0e435e0..2b1aab00417 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -8018,6 +8018,7 @@
       "version": "14.0.3",
       "resolved": "https://registry.npmjs.org/commander/-/commander-14.0.3.tgz",
       "integrity": "sha512-H+y0Jo/T1RZ9qPP4Eh1pkcQcLRglraJaSLoyOtHxu6AapkjWVCy2Sit1QQ4x3Dng8qDlSsZEet7g5Pq06MvTgw==",
+      "devOptional": true,
       "license": "MIT",
       "engines": {
         "node": ">=20"
@@ -20837,7 +20838,7 @@
         "@inquirer/expand": "^5.1.1",
         "@inquirer/select": "^5.2.1",
         "colorette": "^2.0.20",
-        "commander": "^14.0.3",
+        "commander": "^15.0.0",
         "cross-spawn": "^7.0.6",
         "ejs": "^6.0.1",
         "node-plop": "^0.32.0"
@@ -20857,12 +20858,21 @@
         "url": "https://opencollective.com/webpack"
       }
     },
+    "packages/create-webpack-app/node_modules/commander": {
+      "version": "15.0.0",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-15.0.0.tgz",
+      "integrity": "sha512-z67u4ZhzCL/Tydu1lJARtEZYWbWaN7oYLHbsuzocr6y4N6WZAagG3RQ4FW61V1/0+jImpj293XfrcYnd1qxtPg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=22.12.0"
+      }
+    },
     "packages/webpack-cli": {
       "version": "7.0.3",
       "license": "MIT",
       "dependencies": {
         "@discoveryjs/json-ext": "^1.1.0",
-        "commander": "^14.0.3",
+        "commander": "^15.0.0",
         "cross-spawn": "^7.0.6",
         "envinfo": "^7.14.0",
         "import-local": "^3.0.2",
@@ -20905,6 +20915,15 @@
       "engines": {
         "node": ">=14.17.0"
       }
+    },
+    "packages/webpack-cli/node_modules/commander": {
+      "version": "15.0.0",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-15.0.0.tgz",
+      "integrity": "sha512-z67u4ZhzCL/Tydu1lJARtEZYWbWaN7oYLHbsuzocr6y4N6WZAagG3RQ4FW61V1/0+jImpj293XfrcYnd1qxtPg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=22.12.0"
+      }
     }
   }
 }
diff --git a/packages/create-webpack-app/package.json b/packages/create-webpack-app/package.json
index 15cbdbf793f..c4f61b9167f 100644
--- a/packages/create-webpack-app/package.json
+++ b/packages/create-webpack-app/package.json
@@ -42,7 +42,7 @@
     "@inquirer/expand": "^5.1.1",
     "@inquirer/select": "^5.2.1",
     "colorette": "^2.0.20",
-    "commander": "^14.0.3",
+    "commander": "^15.0.0",
     "cross-spawn": "^7.0.6",
     "ejs": "^6.0.1",
     "node-plop": "^0.32.0"
diff --git a/packages/webpack-cli/package.json b/packages/webpack-cli/package.json
index c085b2f5ab2..d794c9c0796 100644
--- a/packages/webpack-cli/package.json
+++ b/packages/webpack-cli/package.json
@@ -32,7 +32,7 @@
   ],
   "dependencies": {
     "@discoveryjs/json-ext": "^1.1.0",
-    "commander": "^14.0.3",
+    "commander": "^15.0.0",
     "cross-spawn": "^7.0.6",
     "envinfo": "^7.14.0",
     "import-local": "^3.0.2",