diff --git a/WORKSPACE b/WORKSPACE
index e50d851bb49..6802cf7f6ac 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -22,10 +22,10 @@ load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
 # 1. Determine SHA256 `wget https://github.com/envoyproxy/envoy/archive/$COMMIT.tar.gz && sha256sum $COMMIT.tar.gz`
 # 2. Update .bazelversion, envoy.bazelrc and .bazelrc if needed.
 #
-# Commit date: 2026-06-24
-ENVOY_SHA = "df2c77d3842e80398b19a65baf3207c3c1aa4e04"
+# Commit date: 2026-06-27
+ENVOY_SHA = "6a98e9b5fe4325f7dd14f670b5201239afec5ffa"
 
-ENVOY_SHA256 = "dcd8da2b3f5db455e2ceef5caf49b2cb115189a48873390c1ee0d2be54984354"
+ENVOY_SHA256 = "13a60687fa8275b378580f49a4fd9969ddd0f3197cec0f0247240f4781db4a3f"
 
 ENVOY_ORG = "envoyproxy"