diff --git a/addons/ekco/0.28.12/Manifest b/addons/ekco/0.28.12/Manifest
index b6587f1a1e..88faeb5d8b 100644
--- a/addons/ekco/0.28.12/Manifest
+++ b/addons/ekco/0.28.12/Manifest
@@ -1,2 +1,2 @@
 image ekco docker.io/replicated/ekco:v0.28.12
-image haproxy haproxy:3.2.8-alpine3.22
+image haproxy haproxy:3.3.1-alpine3.23
diff --git a/addons/ekco/0.28.12/install.sh b/addons/ekco/0.28.12/install.sh
index 181ee42c4f..1c78d51e52 100644
--- a/addons/ekco/0.28.12/install.sh
+++ b/addons/ekco/0.28.12/install.sh
@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 
-EKCO_HAPROXY_IMAGE=haproxy:3.2.8-alpine3.22
+EKCO_HAPROXY_IMAGE=haproxy:3.3.1-alpine3.23
 
 EKCO_ROOK_PRIORITY_CLASS=
 function ekco_pre_init() {