diff --git a/kubernetes/workloads/cilium/create_manifests.sh b/kubernetes/workloads/cilium/create_manifests.sh
index cff0102..05af6dc 100755
--- a/kubernetes/workloads/cilium/create_manifests.sh
+++ b/kubernetes/workloads/cilium/create_manifests.sh
@@ -9,7 +9,7 @@ mkdir -p manifests/base
 pushd manifests/base > /dev/null || exit 1
 
 # https://github.com/cilium/cilium/releases/latest
-export CILIUM_VERSION="1.18.2"
+export CILIUM_VERSION="1.18.3"
 export NAMESPACE=cilium
 
 helm repo update
diff --git a/kubernetes/workloads/cilium/manifests/base/daemonset.yaml b/kubernetes/workloads/cilium/manifests/base/daemonset.yaml
index 904ede0..e6c2d83 100644
--- a/kubernetes/workloads/cilium/manifests/base/daemonset.yaml
+++ b/kubernetes/workloads/cilium/manifests/base/daemonset.yaml
@@ -33,7 +33,7 @@ spec:
           type: Unconfined
       containers:
         - name: cilium-agent
-          image: quay.io/cilium/cilium:v1.18.2@sha256:858f807ea4e20e85e3ea3240a762e1f4b29f1cb5bbd0463b8aa77e7b097c0667
+          image: quay.io/cilium/cilium:v1.18.3@sha256:5649db451c88d928ea585514746d50d91e6210801b300c897283ea319d68de15
           imagePullPolicy: IfNotPresent
           command:
             - cilium-agent
@@ -187,7 +187,7 @@ spec:
               mountPath: /tmp
       initContainers:
         - name: config
-          image: quay.io/cilium/cilium:v1.18.2@sha256:858f807ea4e20e85e3ea3240a762e1f4b29f1cb5bbd0463b8aa77e7b097c0667
+          image: quay.io/cilium/cilium:v1.18.3@sha256:5649db451c88d928ea585514746d50d91e6210801b300c897283ea319d68de15
           imagePullPolicy: IfNotPresent
           command:
             - cilium-dbg
@@ -212,7 +212,7 @@ spec:
               mountPath: /tmp
           terminationMessagePolicy: FallbackToLogsOnError
         - name: mount-cgroup
-          image: quay.io/cilium/cilium:v1.18.2@sha256:858f807ea4e20e85e3ea3240a762e1f4b29f1cb5bbd0463b8aa77e7b097c0667
+          image: quay.io/cilium/cilium:v1.18.3@sha256:5649db451c88d928ea585514746d50d91e6210801b300c897283ea319d68de15
           imagePullPolicy: IfNotPresent
           env:
             - name: CGROUP_ROOT
@@ -244,7 +244,7 @@ spec:
               drop:
                 - ALL
         - name: apply-sysctl-overwrites
-          image: quay.io/cilium/cilium:v1.18.2@sha256:858f807ea4e20e85e3ea3240a762e1f4b29f1cb5bbd0463b8aa77e7b097c0667
+          image: quay.io/cilium/cilium:v1.18.3@sha256:5649db451c88d928ea585514746d50d91e6210801b300c897283ea319d68de15
           imagePullPolicy: IfNotPresent
           env:
             - name: BIN_PATH
@@ -274,7 +274,7 @@ spec:
               drop:
                 - ALL
         - name: mount-bpf-fs
-          image: quay.io/cilium/cilium:v1.18.2@sha256:858f807ea4e20e85e3ea3240a762e1f4b29f1cb5bbd0463b8aa77e7b097c0667
+          image: quay.io/cilium/cilium:v1.18.3@sha256:5649db451c88d928ea585514746d50d91e6210801b300c897283ea319d68de15
           imagePullPolicy: IfNotPresent
           args:
             - mount | grep "/sys/fs/bpf type bpf" || mount -t bpf bpf /sys/fs/bpf
@@ -290,7 +290,7 @@ spec:
               mountPath: /sys/fs/bpf
               mountPropagation: Bidirectional
         - name: clean-cilium-state
-          image: quay.io/cilium/cilium:v1.18.2@sha256:858f807ea4e20e85e3ea3240a762e1f4b29f1cb5bbd0463b8aa77e7b097c0667
+          image: quay.io/cilium/cilium:v1.18.3@sha256:5649db451c88d928ea585514746d50d91e6210801b300c897283ea319d68de15
           imagePullPolicy: IfNotPresent
           command:
             - /init-container.sh
@@ -339,7 +339,7 @@ spec:
             - name: cilium-run
               mountPath: /var/run/cilium
         - name: install-cni-binaries
-          image: quay.io/cilium/cilium:v1.18.2@sha256:858f807ea4e20e85e3ea3240a762e1f4b29f1cb5bbd0463b8aa77e7b097c0667
+          image: quay.io/cilium/cilium:v1.18.3@sha256:5649db451c88d928ea585514746d50d91e6210801b300c897283ea319d68de15
           imagePullPolicy: IfNotPresent
           command:
             - /install-plugin.sh
diff --git a/kubernetes/workloads/cilium/manifests/base/deployment.yaml b/kubernetes/workloads/cilium/manifests/base/deployment.yaml
index b17721f..9065b27 100644
--- a/kubernetes/workloads/cilium/manifests/base/deployment.yaml
+++ b/kubernetes/workloads/cilium/manifests/base/deployment.yaml
@@ -37,7 +37,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: cilium-operator
-          image: quay.io/cilium/operator-generic:v1.18.2@sha256:cb4e4ffc5789fd5ff6a534e3b1460623df61cba00f5ea1c7b40153b5efb81805
+          image: quay.io/cilium/operator-generic:v1.18.3@sha256:b5a0138e1a38e4437c5215257ff4e35373619501f4877dbaf92c89ecfad81797
           imagePullPolicy: IfNotPresent
           command:
             - cilium-operator-generic
@@ -171,7 +171,7 @@ spec:
             runAsUser: 65532
             seccompProfile:
               type: RuntimeDefault
-          image: quay.io/cilium/hubble-relay:v1.18.2@sha256:6079308ee15e44dff476fb522612732f7c5c4407a1017bc3470916242b0405ac
+          image: quay.io/cilium/hubble-relay:v1.18.3@sha256:e53e00c47fe4ffb9c086bad0c1c77f23cb968be4385881160683d9e15aa34dc3
           imagePullPolicy: IfNotPresent
           command:
             - hubble-relay