diff --git a/bucket/gnupg.json b/bucket/gnupg.json
index a234faab5c..19dfaf6cd2 100644
--- a/bucket/gnupg.json
+++ b/bucket/gnupg.json
@@ -1,11 +1,11 @@
 {
     "##": "Duplicate of the gpg package",
-    "version": "2.5.17",
+    "version": "2.5.18",
     "description": "A complete and free implementation of the OpenPGP standard.",
     "homepage": "https://www.gnupg.org/",
     "license": "GPL-3.0-or-later",
-    "url": "https://www.gnupg.org/ftp/gcrypt/binary/gnupg-w32-2.5.17_20260127.exe#/dl.7z",
-    "hash": "sha1:31ac31fe8f5b4f3e3ae8e5e6a70c967a59f66e63",
+    "url": "https://www.gnupg.org/ftp/gcrypt/binary/gnupg-w32-2.5.18_20260224.exe#/dl.7z",
+    "hash": "sha1:d199e450cd49834e8fd15878f8f67b70a00fff01",
     "installer": {
         "script": [
             "Remove-Item \"$dir\\`$PLUGINSDIR\" -Force -Recurse",