diff --git a/.changes/unreleased/security-go-2026-6809.yaml b/.changes/unreleased/security-go-2026-6809.yaml
new file mode 100644
index 00000000..3740cebd
--- /dev/null
+++ b/.changes/unreleased/security-go-2026-6809.yaml
@@ -0,0 +1,3 @@
+kind: Security
+body: Bumped the Go toolchain from 1.26.9 to 1.26.10 to patch the crypto/x509 compromised intermediate certificates issue (GO-2026-6809). Building the CLI from source now requires Go 1.26.10+.
+time: 2026-10-28T14:44:08.000000000Z
diff --git a/src/go.mod b/src/go.mod
index 64de52c7..d44a87ed 100644
--- a/src/go.mod
+++ b/src/go.mod
@@ -1,6 +1,6 @@
 module github.com/opslevel/cli
 
-go 1.26.9
+go 1.26.10
 
 require (
 	github.com/creasty/defaults v1.11.0