diff --git a/apps/zurrli/_system/k8up/jspolicy-tailscale-injector-clusterpolicy.yaml b/apps/zurrli/_system/k8up/jspolicy-tailscale-injector-clusterpolicy.yaml
index fded0cb..8745c0a 100644
--- a/apps/zurrli/_system/k8up/jspolicy-tailscale-injector-clusterpolicy.yaml
+++ b/apps/zurrli/_system/k8up/jspolicy-tailscale-injector-clusterpolicy.yaml
@@ -52,7 +52,7 @@ spec:
     request.object.spec.containers.push({
       name: "ts-sidecar",
       imagePullPolicy: "IfNotPresent",
-      image: "ghcr.io/tailscale/tailscale:v1.61.11",
+      image: "ghcr.io/tailscale/tailscale:v1.62.1",
       command: ["/bin/sh", "-c", shellScript],
       env: [
         {
diff --git a/apps/zurrli/_system/kube-system/tailscale-subnet-router.yaml b/apps/zurrli/_system/kube-system/tailscale-subnet-router.yaml
index 6832554..dd0b4be 100644
--- a/apps/zurrli/_system/kube-system/tailscale-subnet-router.yaml
+++ b/apps/zurrli/_system/kube-system/tailscale-subnet-router.yaml
@@ -50,7 +50,7 @@ spec:
       containers:
         - name: tailscale
           imagePullPolicy: Always
-          image: ghcr.io/tailscale/tailscale:v1.61.11
+          image: ghcr.io/tailscale/tailscale:v1.62.1
           env:
             - name: TS_KUBE_SECRET
               value: tailscale
diff --git a/apps/zurrli/wgtsbridge/deployment.yaml b/apps/zurrli/wgtsbridge/deployment.yaml
index 1cbb304..6ef06e0 100644
--- a/apps/zurrli/wgtsbridge/deployment.yaml
+++ b/apps/zurrli/wgtsbridge/deployment.yaml
@@ -59,7 +59,7 @@ spec:
             mountPath: /etc/wireguard/privatekey
             subPath: privatekey
         - name: tailscale
-          image: ghcr.io/tailscale/tailscale:v1.61.11
+          image: ghcr.io/tailscale/tailscale:v1.62.1
           imagePullPolicy: IfNotPresent
           command:
           - /bin/sh