diff --git a/Cargo.lock b/Cargo.lock
index 4351a54..4cc72d8 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -722,7 +722,7 @@ dependencies = [
  "find-msvc-tools",
  "jobserver",
  "libc",
- "shlex 2.0.1",
+ "shlex",
 ]
 
 [[package]]
@@ -936,7 +936,7 @@ dependencies = [
  "serde_yaml_ng",
  "serial_test",
  "sha2 0.11.0",
- "shlex 1.3.0",
+ "shlex",
  "sqlite-vec",
  "tempfile",
  "thiserror 1.0.69",
@@ -5464,12 +5464,6 @@ dependencies = [
  "lazy_static",
 ]
 
-[[package]]
-name = "shlex"
-version = "1.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64"
-
 [[package]]
 name = "shlex"
 version = "2.0.1"
diff --git a/Cargo.toml b/Cargo.toml
index ea33d30..bba2d35 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -91,7 +91,7 @@ regex = "1"
 
 # Shell-aware tokenizer for read-only command classification. We use ONLY
 # `shlex::split` (RUSTSEC-2024-0006 affects `quote`/`join`, fixed at 1.3.0).
-shlex = "1.3"
+shlex = "2.0"
 
 # Password input
 rpassword = "7"