diff --git a/apps/wave-0/pihole.yaml b/apps/wave-0/pihole.yaml
index c8fb6cf..7662f22 100644
--- a/apps/wave-0/pihole.yaml
+++ b/apps/wave-0/pihole.yaml
@@ -62,7 +62,7 @@ spec:
     spec:
       containers:
       - name: pihole
-        image: pihole/pihole:2026.10.0
+        image: pihole/pihole:2026.10.1
         ports:
         - containerPort: 80
         env:
diff --git a/catalog/pihole.yaml b/catalog/pihole.yaml
index 02696b7..76aa595 100644
--- a/catalog/pihole.yaml
+++ b/catalog/pihole.yaml
@@ -5,7 +5,7 @@
 name: pihole
 kind: container
 source:
-  image: pihole/pihole:2026.10.0
+  image: pihole/pihole:2026.10.1
 exposure: internal            # LAN-only admin UI (docs/13 row 6; R-DNS/R-NET)
 egress: internet              # normal WAN egress (docs/03; R-NET-05)
 storage: