diff --git a/requirements-cpu.txt b/requirements-cpu.txt
index 27ca8ca5dbc5..5362298dd7b9 100644
--- a/requirements-cpu.txt
+++ b/requirements-cpu.txt
@@ -2,5 +2,6 @@
 -r requirements-common.txt
 
 # Dependencies for x86_64 CPUs
-torch == 2.4.0+cpu; platform_machine != "ppc64le"
+torch==2.9.0+cpu; platform_machine != "ppc64le"
 torchvision; platform_machine != "ppc64le"   # required for the image processor of phi3v, this must be updated alongside torch
+urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability