diff --git a/kubernetes/talos-flux/apps/networking/cloudflared/app/helm-release.yaml b/kubernetes/talos-flux/apps/networking/cloudflared/app/helm-release.yaml
index 8f9e04a9c..fa1fb5a72 100644
--- a/kubernetes/talos-flux/apps/networking/cloudflared/app/helm-release.yaml
+++ b/kubernetes/talos-flux/apps/networking/cloudflared/app/helm-release.yaml
@@ -36,7 +36,7 @@ spec:
             nameOverride: *app
             image:
               repository: cloudflare/cloudflared
-              tag: 2023.10.0-amd64
+              tag: 2024.1.0-amd64@sha256:5f422f099d2c047198db2132c48ef570dfb5f72ef53488d6a8c66f4fb68ea25e
             args:
               - tunnel
               - --config