diff --git a/rust/Cargo.lock b/rust/Cargo.lock
index dac9f8165..95134a609 100644
--- a/rust/Cargo.lock
+++ b/rust/Cargo.lock
@@ -6537,9 +6537,9 @@ checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
 
 [[package]]
 name = "tokio"
-version = "1.37.0"
+version = "1.38.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1adbebffeca75fcfd058afa480fb6c0b81e165a0323f9c9d39c9697e37c46787"
+checksum = "ba4f4a02a7a80d6f274636f0aa95c7e383b912d41fe721a31f29e29698585a4a"
 dependencies = [
  "backtrace",
  "bytes",
@@ -6566,9 +6566,9 @@ dependencies = [
 
 [[package]]
 name = "tokio-macros"
-version = "2.2.0"
+version = "2.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5b8a1e28f2deaa14e508979454cb3a223b10b938b45af148bc0986de36f1923b"
+checksum = "5f5ae998a069d4b5aba8ee9dad856af7d520c3699e6159b185c2acd48155d39a"
 dependencies = [
  "proc-macro2",
  "quote",
diff --git a/rust/connlib/clients/android/Cargo.toml b/rust/connlib/clients/android/Cargo.toml
index 7fcb6a060..7814f8ee9 100644
--- a/rust/connlib/clients/android/Cargo.toml
+++ b/rust/connlib/clients/android/Cargo.toml
@@ -24,7 +24,7 @@ log = "0.4"
 serde_json = "1"
 thiserror = "1"
 url = "2.4.0"
-tokio = { version = "1.36", default-features = false, features = ["rt"] }
+tokio = { version = "1.38", default-features = false, features = ["rt"] }
 
 [target.'cfg(target_os = "android")'.dependencies]
 tracing-android = "0.2"
diff --git a/rust/connlib/clients/apple/Cargo.toml b/rust/connlib/clients/apple/Cargo.toml
index d124fd14f..de829d4c0 100644
--- a/rust/connlib/clients/apple/Cargo.toml
+++ b/rust/connlib/clients/apple/Cargo.toml
@@ -22,7 +22,7 @@ tracing-oslog = { git = "https://github.com/Absolucy/tracing-oslog", branch = "m
 tracing-subscriber = "0.3"
 tracing-appender = "0.2"
 url = "2.5.0"
-tokio = { version = "1.36", default-features = false, features = ["rt"] }
+tokio = { version = "1.38", default-features = false, features = ["rt"] }
 
 [lib]
 name = "connlib"
diff --git a/rust/connlib/clients/shared/Cargo.toml b/rust/connlib/clients/shared/Cargo.toml
index 81b33d4f2..298c765f7 100644
--- a/rust/connlib/clients/shared/Cargo.toml
+++ b/rust/connlib/clients/shared/Cargo.toml
@@ -9,7 +9,7 @@ mock = ["connlib-shared/mock"]
 
 [dependencies]
 anyhow = "1.0.82"
-tokio = { version = "1.36", default-features = false, features = ["sync", "rt"] }
+tokio = { version = "1.38", default-features = false, features = ["sync", "rt"] }
 secrecy = { workspace = true }
 tracing = { workspace = true }
 tracing-subscriber = { workspace = true, features = ["env-filter"] }
@@ -35,7 +35,7 @@ tracing-android = "0.2"
 [dev-dependencies]
 chrono = { workspace = true }
 serde_json = { version = "1.0", features = ["std"] }
-tokio = { version = "1.36", default-features = false, features = ["macros"] }
+tokio = { version = "1.38", default-features = false, features = ["macros"] }
 
 [lints]
 workspace = true
diff --git a/rust/connlib/shared/Cargo.toml b/rust/connlib/shared/Cargo.toml
index 809435fce..6e7f8f510 100644
--- a/rust/connlib/shared/Cargo.toml
+++ b/rust/connlib/shared/Cargo.toml
@@ -24,7 +24,7 @@ rand_core = { version = "0.6.4", default-features = false, features = ["std"] }
 serde = { version = "1.0", default-features = false, features = ["derive", "std"] }
 serde_json = { version = "1.0", default-features = false, features = ["std"] }
 thiserror = { version = "1.0", default-features = false }
-tokio = { version = "1.36", features = ["fs"] }
+tokio = { version = "1.38", features = ["fs"] }
 tracing = { workspace = true }
 url = { version = "2.4.1", default-features = false }
 uuid = { version = "1.7", default-features = false, features = ["std", "v4", "serde"] }
@@ -40,7 +40,7 @@ log = "0.4"
 
 [dev-dependencies]
 itertools = "0.12"
-tokio = { version = "1.36", features = ["macros", "rt"] }
+tokio = { version = "1.38", features = ["macros", "rt"] }
 
 [target.'cfg(any(target_os = "macos", target_os = "ios"))'.dependencies]
 swift-bridge = { workspace = true }
diff --git a/rust/connlib/tunnel/Cargo.toml b/rust/connlib/tunnel/Cargo.toml
index 327778eed..f8cb92f4f 100644
--- a/rust/connlib/tunnel/Cargo.toml
+++ b/rust/connlib/tunnel/Cargo.toml
@@ -7,7 +7,7 @@ edition = "2021"
 [dependencies]
 secrecy = { workspace = true }
 async-trait = { version = "0.1", default-features = false }
-tokio = { version = "1.36", default-features = false, features = ["rt", "rt-multi-thread", "sync", "process"] }
+tokio = { version = "1.38", default-features = false, features = ["rt", "rt-multi-thread", "sync", "process"] }
 thiserror = { version = "1.0", default-features = false }
 rand_core = { version = "0.6", default-features = false, features = ["getrandom"] }
 serde = { version = "1.0", default-features = false, features = ["derive", "std"] }
diff --git a/rust/gateway/Cargo.toml b/rust/gateway/Cargo.toml
index 3aea9a705..27ecbbaf4 100644
--- a/rust/gateway/Cargo.toml
+++ b/rust/gateway/Cargo.toml
@@ -21,7 +21,7 @@ firezone-cli-utils = { workspace = true }
 phoenix-channel = { workspace = true }
 secrecy = { workspace = true }
 serde = { version = "1.0", default-features = false, features = ["std", "derive"] }
-tokio = { version = "1.36", default-features = false, features = ["sync", "macros", "rt-multi-thread", "fs", "signal"] }
+tokio = { version = "1.38", default-features = false, features = ["sync", "macros", "rt-multi-thread", "fs", "signal"] }
 tokio-tungstenite = { version = "0.21", default-features = false, features = ["connect", "handshake", "rustls-tls-webpki-roots"] }
 tracing = { workspace = true }
 tracing-subscriber = "0.3.17"
diff --git a/rust/gui-client/src-tauri/Cargo.toml b/rust/gui-client/src-tauri/Cargo.toml
index fc36a1b38..8888c2b8c 100644
--- a/rust/gui-client/src-tauri/Cargo.toml
+++ b/rust/gui-client/src-tauri/Cargo.toml
@@ -42,7 +42,7 @@ tauri = { version = "1.6.7", features = [ "dialog", "notification", "shell-open-
 tauri-runtime = "0.14.2"
 tauri-utils = "1.5.3"
 thiserror = { version = "1.0", default-features = false }
-tokio = { version = "1.36.0", features = ["signal", "time", "macros", "rt", "rt-multi-thread"] }
+tokio = { version = "1.38.0", features = ["signal", "time", "macros", "rt", "rt-multi-thread"] }
 tokio-util = { version = "0.7.11", features = ["codec"] }
 tracing = { workspace = true }
 tracing-log = "0.2"
diff --git a/rust/headless-client/Cargo.toml b/rust/headless-client/Cargo.toml
index 4b5b36ad7..5c3031ca6 100644
--- a/rust/headless-client/Cargo.toml
+++ b/rust/headless-client/Cargo.toml
@@ -23,7 +23,7 @@ serde = { version = "1.0.203", features = ["derive"] }
 serde_json = "1.0.117"
 # This actually relies on many other features in Tokio, so this will probably
 # fail to build outside the workspace. <https://github.com/firezone/firezone/pull/4328#discussion_r1540342142>
-tokio = { version = "1.36.0", features = ["macros", "signal"] }
+tokio = { version = "1.38.0", features = ["macros", "signal"] }
 tokio-util = { version = "0.7.11", features = ["codec"] }
 tracing = { workspace = true }
 tracing-subscriber = { version = "0.3.17", features = ["env-filter"] }
diff --git a/rust/http-health-check/Cargo.toml b/rust/http-health-check/Cargo.toml
index eab49fd5a..223c93e45 100644
--- a/rust/http-health-check/Cargo.toml
+++ b/rust/http-health-check/Cargo.toml
@@ -8,7 +8,7 @@ edition = "2021"
 
 [dependencies]
 axum = { version = "0.7.5", default-features = false, features = ["http1", "tokio"] }
-tokio = { version = "1.36.0", features = ["net"] }
+tokio = { version = "1.38.0", features = ["net"] }
 clap = { version = "4.5.4", features = ["derive", "env"] }
 
 [lints]
diff --git a/rust/http-test-server/Cargo.toml b/rust/http-test-server/Cargo.toml
index 1aa1653fc..c44d6460a 100644
--- a/rust/http-test-server/Cargo.toml
+++ b/rust/http-test-server/Cargo.toml
@@ -9,7 +9,7 @@ edition = "2021"
 [dependencies]
 anyhow = "1"
 axum = { version = "0.7.5", features = ["http1", "tokio"] }
-tokio = { version = "1.36.0", features = ["net"] }
+tokio = { version = "1.38.0", features = ["net"] }
 serde = {version = "1", features = ["derive"]}
 futures = "0.3"
 
diff --git a/rust/phoenix-channel/Cargo.toml b/rust/phoenix-channel/Cargo.toml
index eb1ad84ef..e1f3d4c61 100644
--- a/rust/phoenix-channel/Cargo.toml
+++ b/rust/phoenix-channel/Cargo.toml
@@ -17,7 +17,7 @@ rand_core = "0.6.4"
 url = "2.4.1"
 serde_json = "1.0.117"
 thiserror = "1.0.61"
-tokio = { version = "1.36.0", features = ["net", "time"] }
+tokio = { version = "1.38.0", features = ["net", "time"] }
 backoff = "0.4.0"
 uuid = { version = "1.7", default-features = false, features = ["std", "v4"] }
 sha2 = "0.10.8"
@@ -28,7 +28,7 @@ libc = "0.2"
 hostname = "0.4.0"
 
 [dev-dependencies]
-tokio = { version = "1.36.0", features = ["macros", "rt"] }
+tokio = { version = "1.38.0", features = ["macros", "rt"] }
 
 [lints]
 workspace = true
diff --git a/rust/relay/Cargo.toml b/rust/relay/Cargo.toml
index 782b38a0c..52a897af2 100644
--- a/rust/relay/Cargo.toml
+++ b/rust/relay/Cargo.toml
@@ -13,7 +13,7 @@ futures = "0.3.29"
 hex = "0.4.3"
 rand = "0.8.5"
 stun_codec = "0.3.4"
-tokio = { version = "1.36.0", features = ["macros", "rt-multi-thread", "net", "time", "signal"] }
+tokio = { version = "1.38.0", features = ["macros", "rt-multi-thread", "net", "time", "signal"] }
 tracing = { workspace = true, features = ["log"] }
 tracing-subscriber = { workspace = true, features = ["env-filter", "json", "fmt"] }
 tracing-stackdriver = { version = "0.10.0", features = ["opentelemetry"] }