diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 9a723e88..20a7901c 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "3.23.0"
+  ".": "3.23.1"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index ffba0d92..64670f04 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,13 @@
 # Changelog
 
+## 3.23.1 (2026-10-23)
+
+Full Changelog: [v3.23.0...v3.23.1](https://github.com/browserbase/stagehand-python/compare/v3.23.0...v3.23.1)
+
+### Bug Fixes
+
+* **security:** update the bundled standalone server to [v3.7.7](https://github.com/browserbase/stagehand/releases/tag/stagehand-server-v3/v3.7.7), which includes Node.js 24.22.1 and Undici 7.30.1 with the October 2026 security fixes. Upgrade the Python SDK and restart applications using the local server to use the updated binary. Custom binaries configured with `STAGEHAND_SEA_BINARY` or `_local_stagehand_binary_path` must be updated separately.
+
 ## 3.23.0 (2026-08-19)
 
 Full Changelog: [v3.22.0...v3.23.0](https://github.com/browserbase/stagehand-python/compare/v3.22.0...v3.23.0)
diff --git a/pyproject.toml b/pyproject.toml
index 24d2b8f4..61874e29 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "stagehand"
-version = "3.23.0"
+version = "3.23.1"
 description = "The official Python library for the stagehand API"
 dynamic = ["readme"]
 license = "MIT"
diff --git a/src/stagehand/_version.py b/src/stagehand/_version.py
index aeeeb9a3..53353f2f 100644
--- a/src/stagehand/_version.py
+++ b/src/stagehand/_version.py
@@ -1,4 +1,4 @@
 # File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
 __title__ = "stagehand"
-__version__ = "3.23.0"  # x-release-please-version
+__version__ = "3.23.1"  # x-release-please-version
diff --git a/uv.lock b/uv.lock
index 91121c2e..577ae614 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1335,7 +1335,7 @@ wheels = [
 
 [[package]]
 name = "stagehand"
-version = "3.23.0"
+version = "3.23.1"
 source = { editable = "." }
 dependencies = [
     { name = "anyio", version = "4.12.1", source = { registry = "https://pypi.org/simple" }, marker = "python_full_version < '3.10'" },