diff --git a/src/backend/pyproject.toml b/src/backend/pyproject.toml
index ea8584fdd..5d23fe91a 100644
--- a/src/backend/pyproject.toml
+++ b/src/backend/pyproject.toml
@@ -22,7 +22,7 @@ dependencies = [
     "opentelemetry-instrumentation-openai==0.46.2",
     "opentelemetry-sdk==1.39.0",
     "python-dotenv==1.1.1",
-    "python-multipart==0.0.22",
+    "python-multipart==0.0.26",
     "uvicorn==0.35.0",
     "pylint-pydantic==0.3.5",
     "pexpect==4.9.0",
diff --git a/src/backend/requirements.txt b/src/backend/requirements.txt
index 6f8e709c8..858df6d6a 100644
--- a/src/backend/requirements.txt
+++ b/src/backend/requirements.txt
@@ -5,7 +5,7 @@ azure-monitor-opentelemetry==1.8.5
 azure-monitor-events-extension==0.1.0
 azure-identity==1.24.0
 python-dotenv==1.1.1
-python-multipart==0.0.22
+python-multipart==0.0.26
 opentelemetry-api==1.39.0
 opentelemetry-sdk==1.39.0
 opentelemetry-exporter-otlp-proto-grpc==1.39.0
diff --git a/src/backend/uv.lock b/src/backend/uv.lock
index 4161a6d09..7b06b15ec 100644
--- a/src/backend/uv.lock
+++ b/src/backend/uv.lock
@@ -535,7 +535,7 @@ requires-dist = [
     { name = "pytest-asyncio", marker = "extra == 'dev'", specifier = "==1.3.0" },
     { name = "pytest-cov", marker = "extra == 'dev'", specifier = "==5.0.0" },
     { name = "python-dotenv", specifier = "==1.1.1" },
-    { name = "python-multipart", specifier = "==0.0.22" },
+    { name = "python-multipart", specifier = "==0.0.26" },
     { name = "urllib3", specifier = "==2.6.3" },
     { name = "uvicorn", specifier = "==0.35.0" },
     { name = "werkzeug", specifier = "==3.1.6" },
@@ -2490,11 +2490,11 @@ wheels = [
 
 [[package]]
 name = "python-multipart"
-version = "0.0.22"
+version = "0.0.26"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/94/01/979e98d542a70714b0cb2b6728ed0b7c46792b695e3eaec3e20711271ca3/python_multipart-0.0.22.tar.gz", hash = "sha256:7340bef99a7e0032613f56dc36027b959fd3b30a787ed62d310e951f7c3a3a58", size = 37612, upload-time = "2026-01-25T10:15:56.219Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/88/71/b145a380824a960ebd60e1014256dbb7d2253f2316ff2d73dfd8928ec2c3/python_multipart-0.0.26.tar.gz", hash = "sha256:08fadc45918cd615e26846437f50c5d6d23304da32c341f289a617127b081f17", size = 43501, upload-time = "2026-04-10T14:09:59.473Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/1b/d0/397f9626e711ff749a95d96b7af99b9c566a9bb5129b8e4c10fc4d100304/python_multipart-0.0.22-py3-none-any.whl", hash = "sha256:2b2cd894c83d21bf49d702499531c7bafd057d730c201782048f7945d82de155", size = 24579, upload-time = "2026-01-25T10:15:54.811Z" },
+    { url = "https://files.pythonhosted.org/packages/9a/22/f1925cdda983ab66fc8ec6ec8014b959262747e58bdca26a4e3d1da29d56/python_multipart-0.0.26-py3-none-any.whl", hash = "sha256:c0b169f8c4484c13b0dcf2ef0ec3a4adb255c4b7d18d8e420477d2b1dd03f185", size = 28847, upload-time = "2026-04-10T14:09:58.131Z" },
 ]
 
 [[package]]