diff --git a/SPECS/munge/munge.signatures.json b/SPECS/munge/munge.signatures.json
index d9e50b2372e..eb8b3e96ba5 100644
--- a/SPECS/munge/munge.signatures.json
+++ b/SPECS/munge/munge.signatures.json
@@ -1,7 +1,7 @@
 {
- "Signatures": {
-  "create-munge-key": "faf294f275027c9165524daa17e862ae7e28cb32aed5f9c452d9bd37065ccebe",
-  "munge-0.5.15.tar.xz": "3f979df117a34c74db8fe2835521044bdeb08e3b7d0f168ca97c3547f51da9ba",
-  "munge.logrotate": "f8443edd07c98e0e3c9178c93a0a35e1c690cf3b6fbdb33508b34871657a9879"
- }
+  "Signatures": {
+    "create-munge-key": "faf294f275027c9165524daa17e862ae7e28cb32aed5f9c452d9bd37065ccebe",
+    "munge.logrotate": "f8443edd07c98e0e3c9178c93a0a35e1c690cf3b6fbdb33508b34871657a9879",
+    "munge-0.5.18.tar.xz": "39c3ec6ef5604bfa206e8aa10fc05d5119040f6de4a554bc0fb98ca1aed838dc"
+  }
 }
diff --git a/SPECS/munge/munge.spec b/SPECS/munge/munge.spec
index f4b6e8c11b8..73a1a298217 100644
--- a/SPECS/munge/munge.spec
+++ b/SPECS/munge/munge.spec
@@ -1,6 +1,6 @@
 Summary:        Enables uid & gid authentication across a host cluster
 Name:           munge
-Version:        0.5.15
+Version:        0.5.18
 Release:        1%{?dist}
 # The libs and devel package is GPLv3+ and LGPLv3+ where as the main package is GPLv3 only.
 License:        GPLv3+ AND LGPLv3+
@@ -161,6 +161,9 @@ exit 0
 %{_mandir}/man3/munge_strerror.3.gz
 
 %changelog
+* Fri Feb 13 2026 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 0.5.18-1
+- Auto-upgrade to 0.5.18 - for CVE-2026-25506
+
 * Wed Jan 31 2024 Mitch Zhu <cblmargh@microsoft.com> - 0.5.15-1
 - Upstream 0.5.15.
 
diff --git a/cgmanifest.json b/cgmanifest.json
index c40d17d9ed3..3a6fa6768db 100644
--- a/cgmanifest.json
+++ b/cgmanifest.json
@@ -13862,8 +13862,8 @@
         "type": "other",
         "other": {
           "name": "munge",
-          "version": "0.5.15",
-          "downloadUrl": "https://github.com/dun/munge/releases/download/munge-0.5.15/munge-0.5.15.tar.xz"
+          "version": "0.5.18",
+          "downloadUrl": "https://github.com/dun/munge/releases/download/munge-0.5.18/munge-0.5.18.tar.xz"
         }
       }
     },