diff --git a/apps/cli/package.json b/apps/cli/package.json
index 520140a676d..bd77627f709 100644
--- a/apps/cli/package.json
+++ b/apps/cli/package.json
@@ -64,7 +64,7 @@
     ]
   },
   "dependencies": {
-    "@koa/multer": "3.1.0",
+    "@koa/multer": "4.0.0",
     "@koa/router": "13.1.0",
     "argon2": "0.41.1",
     "big-integer": "1.6.52",
diff --git a/package-lock.json b/package-lock.json
index 6b18b6f8af8..bde67319dad 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -27,7 +27,7 @@
         "@bitwarden/sdk-internal": "0.2.0-main.225",
         "@electron/fuses": "1.8.0",
         "@emotion/css": "11.13.5",
-        "@koa/multer": "3.1.0",
+        "@koa/multer": "4.0.0",
         "@koa/router": "13.1.0",
         "@microsoft/signalr": "8.0.7",
         "@microsoft/signalr-protocol-msgpack": "8.0.7",
@@ -204,7 +204,7 @@
       "version": "2025.6.1",
       "license": "SEE LICENSE IN LICENSE.txt",
       "dependencies": {
-        "@koa/multer": "3.1.0",
+        "@koa/multer": "4.0.0",
         "@koa/router": "13.1.0",
         "argon2": "0.41.1",
         "big-integer": "1.6.52",
@@ -7808,14 +7808,15 @@
       }
     },
     "node_modules/@koa/multer": {
-      "version": "3.1.0",
-      "resolved": "https://registry.npmjs.org/@koa/multer/-/multer-3.1.0.tgz",
-      "integrity": "sha512-ETf4OLpOew9XE9lyU+5HIqk3TCmdGAw9pUXgxzrlYip+PkxLGoU4meiVTxiW4B6lxdBNijb3DFQ7M2woLcDL1g==",
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/@koa/multer/-/multer-4.0.0.tgz",
+      "integrity": "sha512-BY6hys3WVX1yL/gcfKWu94z1fJ6ayG1DEEw/s82DnulkaTbumwjF6XqSfNLKFcs8lnJb2QfMJ4DyK4bmF1NDZw==",
       "license": "MIT",
       "engines": {
-        "node": ">= 14"
+        "node": ">= 18"
       },
       "peerDependencies": {
+        "koa": ">=2",
         "multer": "*"
       }
     },
diff --git a/package.json b/package.json
index 8cd2e0991b0..ca84074ff26 100644
--- a/package.json
+++ b/package.json
@@ -163,7 +163,7 @@
     "@bitwarden/sdk-internal": "0.2.0-main.225",
     "@electron/fuses": "1.8.0",
     "@emotion/css": "11.13.5",
-    "@koa/multer": "3.1.0",
+    "@koa/multer": "4.0.0",
     "@koa/router": "13.1.0",
     "@microsoft/signalr": "8.0.7",
     "@microsoft/signalr-protocol-msgpack": "8.0.7",