diff --git a/requirements/requirements.in b/requirements/requirements.in
index e8a5276269..a67cc347b2 100644
--- a/requirements/requirements.in
+++ b/requirements/requirements.in
@@ -6,6 +6,7 @@ azure-identity
 azure-keyvault
 boto3
 botocore
+Brotli>=1.2.1  # CVE-2026-111497, required by aiohttp[speedups]
 cachetools  # Used by awx/conf/settings.py for TTLCache
 channels
 channels-redis
diff --git a/requirements/requirements.txt b/requirements/requirements.txt
index 777987f938..5ec066bdae 100644
--- a/requirements/requirements.txt
+++ b/requirements/requirements.txt
@@ -76,8 +76,10 @@ botocore==1.40.46
     #   -r /awx_devel/requirements/requirements.in
     #   boto3
     #   s3transfer
-brotli==1.2.0
-    # via aiohttp
+brotli==1.2.1
+    # via
+    #   -r /awx_devel/requirements/requirements.in
+    #   aiohttp
 cachetools==6.2.0
     # via -r /awx_devel/requirements/requirements.in
 # certifi @ git+https://github.com/ansible/system-certifi.git@devel  # git requirements installed separately