diff --git a/stacks/sensitive/compose.yaml b/stacks/sensitive/compose.yaml
index f6a20aba..e934c9b4 100644
--- a/stacks/sensitive/compose.yaml
+++ b/stacks/sensitive/compose.yaml
@@ -342,7 +342,7 @@ services:
   # nothing to hold is a mount nothing reads.
   home-assistant:
     <<: *service-defaults
-    image: ghcr.io/home-assistant/home-assistant:2026.9.2@sha256:a1bc133af84ee6505fe2c266d9805b7c75b780dfdc188edfee3b11e8f3cd8efe
+    image: ghcr.io/home-assistant/home-assistant:2026.9.3@sha256:d8922685169707fd91e8b9729902d975f06157d005e422874d201e0261dda196
     container_name: sensitive-home-assistant
     init: false
     # A ceiling to catch a leak, not a measurement: #114's method — median and