diff --git a/deployments/compose/docker-compose.dev.yml b/deployments/compose/docker-compose.dev.yml
index f16c9e303e..a4808829a4 100644
--- a/deployments/compose/docker-compose.dev.yml
+++ b/deployments/compose/docker-compose.dev.yml
@@ -57,7 +57,7 @@ services:
 
   # The CometBFT node
   cometbft-node0:
-    image: "docker.io/cometbft/cometbft:v0.37.9"
+    image: "docker.io/cometbft/cometbft:v0.37.15"
     ports:
       - "26656:26656"
       - "26657:26657"
diff --git a/deployments/compose/docker-compose.yml b/deployments/compose/docker-compose.yml
index a17e523bb1..db714f359b 100644
--- a/deployments/compose/docker-compose.yml
+++ b/deployments/compose/docker-compose.yml
@@ -57,7 +57,7 @@ services:
 
   # The CometBFT node
   cometbft-node0:
-    image: "docker.io/cometbft/cometbft:v0.37.9"
+    image: "docker.io/cometbft/cometbft:v0.37.15"
     ports:
       - "26656:26656"
       - "26657:26657"
diff --git a/deployments/scripts/install-cometbft b/deployments/scripts/install-cometbft
index efc9059c35..5aa0313243 100755
--- a/deployments/scripts/install-cometbft
+++ b/deployments/scripts/install-cometbft
@@ -5,7 +5,7 @@ set -euo pipefail
 
 
 # Sane defaults
-COMETBFT_VERSION="${COMETBFT_VERSION:-0.37.9}"
+COMETBFT_VERSION="${COMETBFT_VERSION:-0.37.15}"
 
 # Download and extract
 cometbft_download_url="https://github.com/cometbft/cometbft/releases/download/v${COMETBFT_VERSION}/cometbft_${COMETBFT_VERSION}_linux_amd64.tar.gz"
diff --git a/flake.nix b/flake.nix
index fca7ebef1d..94daf15715 100644
--- a/flake.nix
+++ b/flake.nix
@@ -26,9 +26,11 @@
           # nix-prefetch-git --url https://github.com/cometbft/cometbft --rev <tag>
           # and review the output.
           cometBftRelease = {
-            version = "0.37.9";
-            sha256 = "sha256-4LUdDlDog4kbiwyGo5fZEvtDXa6sIm+SKlSBWq1angc=";
-            vendorHash = "sha256-0iqI/Z8rqDyQ7JqSrsqA9kADqF6qZy8NxTDNjAYYHts=";
+            version = "0.37.15";
+            # Set `sha256` to the value `hash` in the nix-prefetch-git output.
+            sha256 = "sha256-sX3hehsMNWWiQYbepMcdVoUAqz+lK4x76/ohjGb/J08=";
+            # Set `vendorHash` to "", run `nix build`, and review the hash.
+            vendorHash = "sha256-F6km3YpvfdpPeIJB1FwA5lQvPda11odny0EHPD8B6kw=";
           };
 
           # Build grpcui from source, for Reflection v1 support.