diff --git a/vhdbuilder/packer/trivy-scan.sh b/vhdbuilder/packer/trivy-scan.sh
index d00e9fc4130..413dd824308 100644
--- a/vhdbuilder/packer/trivy-scan.sh
+++ b/vhdbuilder/packer/trivy-scan.sh
@@ -18,7 +18,7 @@ TRIVY_DEB_2204_VERSION="0.70.0-ubuntu22.04u2"
 TRIVY_DEB_2404_VERSION="0.70.0-ubuntu24.04u3"
 
 # renovate: datasource=rpm depName=trivy registryUrl=https://packages.microsoft.com/azurelinux/3.0/prod/cloud-native/x86_64/repodata
-TRIVY_RPM_VERSION="0.70.0-2.azl3"
+TRIVY_RPM_VERSION="0.70.0-3.azl3"
 
 # Fallback version for SKUs without PMC packages (Flatcar, AzureContainerLinux, AzureLinuxOSGuard).
 # This MUST match an actual upstream GitHub release tag — PMC versions (0.68.x) don't exist on GitHub.