diff --git a/pyproject.toml b/pyproject.toml
index ad642ab01..bc29cd5f4 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -47,6 +47,7 @@ dependencies = [
     "jsonschema>=4.20.0",  # JSON Schema validation for tool inputs/outputs
     "tomlkit>=0.13.0",  # TOML writing with comment preservation for config CLI
     "tenacity>=8.2.0",  # Retry framework for service layer resilience
+    "aiohttp>=3.13.4",  # CVE-2026-34515 mitigation: open redirect vulnerability
 ]
 
 [project.optional-dependencies]