diff --git a/Dockerfile b/Dockerfile
index 0b5e611e..6f779689 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 # Engraphis — self-hosted AI memory engine. Local-first; you bring the LLM.
-FROM python:3.11-slim@sha256:b7a9e5f6a93d6d4a31f129bbd4bdee69efccb6ded0fb230d78aafaf37af98377 AS base
+FROM python:3.11.18-slim@sha256:db20d8506e2f15b6db39b40b6015ca46bae855dec6dd326d462cfe79ae972893 AS base
 
 # ENGRAPHIS_HOST is deliberately NOT set here: docker-entrypoint.sh chooses IPv6 for a
 # Railway deployment (which injects RAILWAY_SERVICE_NAME) and 0.0.0.0 for ordinary Docker.
diff --git a/tests/test_release_infrastructure.py b/tests/test_release_infrastructure.py
index eaa815c9..dda9f52f 100644
--- a/tests/test_release_infrastructure.py
+++ b/tests/test_release_infrastructure.py
@@ -215,8 +215,8 @@ def test_ci_and_release_audit_production_image_dependencies():
     assert "tesseract-ocr" in _text("Dockerfile")
     assert (
         _text("Dockerfile").splitlines()[1]
-        == "FROM python:3.11-slim@sha256:"
-        "b7a9e5f6a93d6d4a31f129bbd4bdee69efccb6ded0fb230d78aafaf37af98377 AS base"
+        == "FROM python:3.11.18-slim@sha256:"
+        "db20d8506e2f15b6db39b40b6015ca46bae855dec6dd326d462cfe79ae972893 AS base"
     )
     assert "Verify production image OCR runtime" in ci
     assert "Verify production image OCR runtime" in release