diff --git a/hack/release.toml b/hack/release.toml
index f57f5c5e81..deb18b851a 100644
--- a/hack/release.toml
+++ b/hack/release.toml
@@ -20,6 +20,7 @@ preface = """
         description = """\
 * Linux: 6.12.9
 * runc: 1.2.4
+* containerd: 2.0.2
 
 Talos is built with Go 1.23.4.
 """
diff --git a/pkg/machinery/constants/constants.go b/pkg/machinery/constants/constants.go
index cf6d3e0ee0..3788ae91ef 100644
--- a/pkg/machinery/constants/constants.go
+++ b/pkg/machinery/constants/constants.go
@@ -544,7 +544,7 @@ const (
 	TrustdUserID = 51
 
 	// DefaultContainerdVersion is the default container runtime version.
-	DefaultContainerdVersion = "2.0.1"
+	DefaultContainerdVersion = "2.0.2"
 
 	// SystemContainerdNamespace is the Containerd namespace for Talos services.
 	SystemContainerdNamespace = "system"