diff --git a/clustertool/embed/generic/base/talos/talconfig.yaml b/clustertool/embed/generic/base/talos/talconfig.yaml
index 977b475db88..d0795e8c78c 100644
--- a/clustertool/embed/generic/base/talos/talconfig.yaml
+++ b/clustertool/embed/generic/base/talos/talconfig.yaml
@@ -2,7 +2,7 @@ clusterName: ${CLUSTERNAME}
 # renovate: datasource=docker depName=ghcr.io/siderolabs/installer
 talosVersion: v1.10.3
 # renovate: datasource=docker depName=ghcr.io/siderolabs/kubelet
-kubernetesVersion: v1.33.0
+kubernetesVersion: v1.33.1
 endpoint: https://${VIP}:6443
 allowSchedulingOnControlPlanes: true
 additionalMachineCertSans:
diff --git a/clustertool/embed/generic/kubernetes/flux-system/flux/upgradesettings.yaml b/clustertool/embed/generic/kubernetes/flux-system/flux/upgradesettings.yaml
index 88001c8bd37..fdeb5d4aa05 100644
--- a/clustertool/embed/generic/kubernetes/flux-system/flux/upgradesettings.yaml
+++ b/clustertool/embed/generic/kubernetes/flux-system/flux/upgradesettings.yaml
@@ -7,4 +7,4 @@ data:
   # renovate: datasource=docker depName=ghcr.io/siderolabs/installer
   TALOS_VERSION: v1.10.3
   # renovate: datasource=docker depName=ghcr.io/siderolabs/kubelet
-  KUBERNETES_VERSION: v1.33.0
+  KUBERNETES_VERSION: v1.33.1