diff --git a/.node-version b/.node-version
index 2bd5a0a..6f4247a 100644
--- a/.node-version
+++ b/.node-version
@@ -1 +1 @@
-22
+26
diff --git a/.nvmrc b/.nvmrc
index 2bd5a0a..6f4247a 100644
--- a/.nvmrc
+++ b/.nvmrc
@@ -1 +1 @@
-22
+26
diff --git a/Dockerfile b/Dockerfile
index 909413b..bd2d964 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,7 +1,7 @@
 # syntax=docker/dockerfile:1
 
 # The full image carries the build tools for socket.io's optional native dependencies.
-FROM node:22-bookworm AS build
+FROM node:26-bookworm AS build
 WORKDIR /app
 
 # `shared` is consumed by the backend as `file:../shared` and is bundled into
@@ -20,7 +20,7 @@ RUN npm --prefix backend run build
 # left external (express, socket.io, cors, gl-matrix, minimist, msgpack parser).
 RUN npm --prefix backend prune --production
 
-FROM node:22-bookworm-slim
+FROM node:26-bookworm-slim
 WORKDIR /app
 ENV NODE_ENV=production
 
diff --git a/backend/package-lock.json b/backend/package-lock.json
index 5c45e81..3b633e6 100644
--- a/backend/package-lock.json
+++ b/backend/package-lock.json
@@ -22,7 +22,7 @@
         "@types/cors": "^2.8.19",
         "@types/express": "^5.0.6",
         "@types/minimist": "^1.2.5",
-        "@types/node": "^22.0.0",
+        "@types/node": "^26.0.0",
         "clean-webpack-plugin": "^4.0.0",
         "concurrently": "^10.0.3",
         "nodemon": "^3.1.14",
@@ -33,6 +33,9 @@
         "webpack": "^5.107.2",
         "webpack-cli": "^7.0.3",
         "webpack-node-externals": "^3.0.0"
+      },
+      "engines": {
+        "node": ">=20"
       }
     },
     "../shared": {
@@ -48,6 +51,9 @@
         "typescript": "^6.0.3",
         "webpack": "^5.107.2",
         "webpack-cli": "^7.0.3"
+      },
+      "engines": {
+        "node": ">=20"
       }
     },
     "node_modules/@discoveryjs/json-ext": {
@@ -218,12 +224,12 @@
       "license": "MIT"
     },
     "node_modules/@types/node": {
-      "version": "22.19.19",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-22.19.19.tgz",
-      "integrity": "sha512-dyh/xO2Fh5bYrfWaaqGrRQQGkNdmYw6AmaAUvYeUMNTWQtvb796ikLdmTchRmOlOiIJ1TDXfWgVx1QkUlQ6Hew==",
+      "version": "26.6.6",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-26.6.6.tgz",
+      "integrity": "sha512-MzQj+8Kx3XI40OmUAE6Qoh58ZMNstNNMwn2nfd3qWsfe7nDNSqJNzes4njhz6AHwrSHOffSLwXU6yb474Q4aog==",
       "license": "MIT",
       "dependencies": {
-        "undici-types": "~6.21.0"
+        "undici-types": "~8.9.0"
       }
     },
     "node_modules/@types/qs": {
@@ -3325,9 +3331,9 @@
       "license": "MIT"
     },
     "node_modules/undici-types": {
-      "version": "6.21.0",
-      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.21.0.tgz",
-      "integrity": "sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==",
+      "version": "8.9.0",
+      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-8.9.0.tgz",
+      "integrity": "sha512-KTDyRTYX8sWmKXAikPHHSyc63CRPETMctyjKFupcC6OBLXT3xsN0e9aF7m+mIXutFWpUXuedtowG7iLOzp0kQg==",
       "license": "MIT"
     },
     "node_modules/unpipe": {
diff --git a/backend/package.json b/backend/package.json
index 02b9087..b71ca0a 100644
--- a/backend/package.json
+++ b/backend/package.json
@@ -28,7 +28,7 @@
     "@types/cors": "^2.8.19",
     "@types/express": "^5.0.6",
     "@types/minimist": "^1.2.5",
-    "@types/node": "^22.0.0",
+    "@types/node": "^26.0.0",
     "clean-webpack-plugin": "^4.0.0",
     "concurrently": "^10.0.3",
     "nodemon": "^3.1.14",