diff --git a/Cargo.lock b/Cargo.lock
index 7729a79c..c200d198 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4450,9 +4450,9 @@ dependencies = [
 
 [[package]]
 name = "tower-http"
-version = "0.6.6"
+version = "0.6.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "adc82fd73de2a9722ac5da747f12383d2bfdb93591ee6c58486e0097890f05f2"
+checksum = "9cf146f99d442e8e68e585f5d798ccd3cad9a7835b917e09728880a862706456"
 dependencies = [
  "bitflags",
  "bytes",
diff --git a/Cargo.nix b/Cargo.nix
index 6b8643bf..45a8363a 100644
--- a/Cargo.nix
+++ b/Cargo.nix
@@ -16612,9 +16612,9 @@ rec {
       };
       "tower-http" = rec {
         crateName = "tower-http";
-        version = "0.6.6";
+        version = "0.6.7";
         edition = "2018";
-        sha256 = "1wh51y4rf03f91c6rvli6nwzsarx7097yx6sqlm75ag27pbjzj5d";
+        sha256 = "0mk4f1iai048f84px4avhfkxkjnkrjcdgxc5wml8wbj4kpwldwcw";
         libName = "tower_http";
         authors = [
           "Tower Maintainers <team@tower-rs.com>"
diff --git a/academy_api/rest/Cargo.toml b/academy_api/rest/Cargo.toml
index d5da0578..8fa5c7b5 100644
--- a/academy_api/rest/Cargo.toml
+++ b/academy_api/rest/Cargo.toml
@@ -47,7 +47,7 @@ serde.workspace = true
 serde_json.workspace = true
 sha2.workspace = true
 tokio.workspace = true
-tower-http = { version = "0.6.6", default-features = false, features = ["cors", "trace"] }
+tower-http = { version = "0.6.7", default-features = false, features = ["cors", "trace"] }
 tracing.workspace = true
 uuid.workspace = true