diff --git a/kubernetes/apps/home/penpot/app/helmrelease.yaml b/kubernetes/apps/home/penpot/app/helmrelease.yaml
index 1b9dbc6e5..5bbb4e164 100644
--- a/kubernetes/apps/home/penpot/app/helmrelease.yaml
+++ b/kubernetes/apps/home/penpot/app/helmrelease.yaml
@@ -41,7 +41,7 @@ spec:
           app:
             image:
               repository: penpotapp/frontend
-              tag: 2.15.0
+              tag: 2.15.2
             env:
               PENPOT_FLAGS: enable-oidc disable-registration disable-email-verification disable-onboarding disable-onboarding-team
               PENPOT_BACKEND_URI: http://penpot-backend.home.svc.cluster.local:6060
@@ -104,7 +104,7 @@ spec:
           app:
             image:
               repository: penpotapp/backend
-              tag: 2.15.0
+              tag: 2.15.2
             env:
               PENPOT_FLAGS: enable-oidc disable-registration disable-email-verification disable-onboarding disable-onboarding-team
               PENPOT_PUBLIC_URI: https://penpot.ironstone.casa
@@ -196,7 +196,7 @@ spec:
           app:
             image:
               repository: penpotapp/exporter
-              tag: 2.15.0
+              tag: 2.15.2
             env:
               PENPOT_FLAGS: enable-oidc disable-registration disable-email-verification disable-onboarding disable-onboarding-team
               # Exporter loads pages via headless Chromium; use the internal frontend service