diff --git a/internal/hermes/hermes.go b/internal/hermes/hermes.go
index 58f67bf8..fcdaf1ee 100644
--- a/internal/hermes/hermes.go
+++ b/internal/hermes/hermes.go
@@ -33,7 +33,7 @@ const (
 	// renovate: datasource=helm depName=raw registryUrl=https://bedag.github.io/helm-charts/
 	rawChartVersion = "2.0.2"
 
-	defaultImage = "nousresearch/hermes-agent:v2026.5.7"
+	defaultImage = "nousresearch/hermes-agent:v2026.5.28"
 	// Use the upstream image venv instead of cloning Hermes into the PVC on
 	// every cold start. The init container below validates the required extras
 	// are present so image regressions fail before the gateway starts.
diff --git a/internal/serviceoffercontroller/agent_render.go b/internal/serviceoffercontroller/agent_render.go
index c5e9a25f..8a420abb 100644
--- a/internal/serviceoffercontroller/agent_render.go
+++ b/internal/serviceoffercontroller/agent_render.go
@@ -25,7 +25,7 @@ const (
 	hermesProfileSeed  = "hermes-profile-seed"
 	hermesDataPVC      = "hermes-data"
 	hermesAPIPath      = "/health"
-	defaultHermesImage = "nousresearch/hermes-agent:v2026.5.7"
+	defaultHermesImage = "nousresearch/hermes-agent:v2026.5.28"
 )
 
 // agentLabels returns the standard label set we attach to every primitive