diff --git a/Dockerfile.windows b/Dockerfile.windows
index 6626ca72be..076677525d 100644
--- a/Dockerfile.windows
+++ b/Dockerfile.windows
@@ -44,7 +44,7 @@ ARG KUBERNETES_VERSION=dev
 
 # windows runtime image
 ENV CRICTL_VERSION="v1.29.0"
-ENV CALICO_VERSION="v3.26.1"
+ENV CALICO_VERSION="v3.27.0"
 ENV CNI_PLUGIN_VERSION="v1.4.0"
 ENV FLANNEL_VERSION="v0.24.2"
 ENV CNI_FLANNEL_VERSION="v1.4.0-flannel1"
diff --git a/charts/chart_versions.yaml b/charts/chart_versions.yaml
index 778afd8a53..d04768b553 100644
--- a/charts/chart_versions.yaml
+++ b/charts/chart_versions.yaml
@@ -5,10 +5,10 @@ charts:
   - version: v3.27.0-build2024020601
     filename: /charts/rke2-canal.yaml
     bootstrap: true
-  - version: v3.26.300
+  - version: v3.27.002
     filename: /charts/rke2-calico.yaml
     bootstrap: true
-  - version: v3.26.300
+  - version: v3.27.002
     filename: /charts/rke2-calico-crd.yaml
     bootstrap: true
   - version: 1.29.000
diff --git a/scripts/build-images b/scripts/build-images
index a026b46caa..2b4665c6b0 100755
--- a/scripts/build-images
+++ b/scripts/build-images
@@ -49,14 +49,14 @@ xargs -n1 -t docker image pull --quiet << EOF > build/images-cilium.txt
 EOF
 
 xargs -n1 -t docker image pull --quiet << EOF > build/images-calico.txt
-    ${REGISTRY}/rancher/mirrored-calico-operator:v1.30.7
-    ${REGISTRY}/rancher/mirrored-calico-ctl:v3.26.3
-    ${REGISTRY}/rancher/mirrored-calico-kube-controllers:v3.26.3
-    ${REGISTRY}/rancher/mirrored-calico-typha:v3.26.3
-    ${REGISTRY}/rancher/mirrored-calico-node:v3.26.3
-    ${REGISTRY}/rancher/mirrored-calico-pod2daemon-flexvol:v3.26.3
-    ${REGISTRY}/rancher/mirrored-calico-cni:v3.26.3
-    ${REGISTRY}/rancher/mirrored-calico-apiserver:v3.26.3
+    ${REGISTRY}/rancher/mirrored-calico-operator:v1.32.3
+    ${REGISTRY}/rancher/mirrored-calico-ctl:v3.27.0
+    ${REGISTRY}/rancher/mirrored-calico-kube-controllers:v3.27.0
+    ${REGISTRY}/rancher/mirrored-calico-typha:v3.27.0
+    ${REGISTRY}/rancher/mirrored-calico-node:v3.27.0
+    ${REGISTRY}/rancher/mirrored-calico-pod2daemon-flexvol:v3.27.0
+    ${REGISTRY}/rancher/mirrored-calico-cni:v3.27.0
+    ${REGISTRY}/rancher/mirrored-calico-apiserver:v3.27.0
 EOF
 
 if [ "${GOARCH}" != "arm64" ]; then