diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1a2f57d5e..e20e91315 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -15,6 +15,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/).
 
 ### Fixed
 
+- Bump Go to 1.26.10 to pick up the fix for GO-2026-6809 (crypto/x509), which `govulncheck` now reports against 1.26.9.
 - `--max-instances` drop summary: a zero-Count recommendation swept out by the
   `--min-count` floor no longer drives the tally negative (which panicked in
   `DropSummary.Add`), and removed zero-Count entries are now counted and named
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 5b4fab41a..536c7588e 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -48,7 +48,7 @@ By participating in this project, you agree to maintain a respectful and inclusi
 
 ### Prerequisites
 
-- Go 1.26.9 or later (the floor set by the `go` directive in `go.mod`)
+- Go 1.26.10 or later (the floor set by the `go` directive in `go.mod`)
 - Git
 
 ### Getting Started
@@ -85,7 +85,7 @@ from a copy of the committed `go.work` and append your active worktrees:
 // go.work.local -- gitignored, developer-local
 // Keep this `go` line at or above the modules' own directive, otherwise the
 // workspace is rejected. Copy it from the committed go.work.
-go 1.26.9
+go 1.26.10
 
 use (
     .
diff --git a/go.mod b/go.mod
index a34645ebb..638172ca7 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/LeanerCloud/cloud-commitments-cli
 
-go 1.26.9
+go 1.26.10
 
 require (
 	github.com/aws/aws-sdk-go-v2 v1.41.5
diff --git a/go.work b/go.work
index e3dba14c2..2c6c8ae0f 100644
--- a/go.work
+++ b/go.work
@@ -1,3 +1,3 @@
-go 1.26.9
+go 1.26.10
 
 use .