diff --git a/src/compile/common.rs b/src/compile/common.rs
index 5e018087..a5228184 100644
--- a/src/compile/common.rs
+++ b/src/compile/common.rs
@@ -582,7 +582,7 @@ pub const DEFAULT_POOL: &str = "AZS-1ES-L-MMS-ubuntu-22.04";
 /// Version of the AWF (Agentic Workflow Firewall) binary to download from GitHub Releases.
 /// Update this when upgrading to a new AWF release.
 /// See: https://github.com/github/gh-aw-firewall/releases
-pub const AWF_VERSION: &str = "0.25.33";
+pub const AWF_VERSION: &str = "0.25.39";
 
 /// Prefix used to identify agentic pipeline YAML files generated by ado-aw.
 pub const HEADER_MARKER: &str = "# @ado-aw";