diff --git a/rdagent/scenarios/rl/autorl_bench/benchmarks/webshop/requirements.txt b/rdagent/scenarios/rl/autorl_bench/benchmarks/webshop/requirements.txt
index 7e3e4829..3d442209 100644
--- a/rdagent/scenarios/rl/autorl_bench/benchmarks/webshop/requirements.txt
+++ b/rdagent/scenarios/rl/autorl_bench/benchmarks/webshop/requirements.txt
@@ -7,7 +7,7 @@
 #   pip install -r benchmarks/webshop/requirements.txt
 #   python -m spacy download en_core_web_sm
 #
-# Note: Flask/Werkzeug pinned to 2.x (Flask 3.x incompatible with WebShop)
+# Note: Flask/Werkzeug updated to 3.x for security fixes (previously pinned to 2.x)
 
 # WebShop PyPI package
 webshop
@@ -27,7 +27,8 @@ spacy==3.7.2
 # Note: Flask/Werkzeug updated to 3.x for security fixes
 # Security Notes:
 # - CVE-2025-66221: Windows device names in safe_join() (fixed in 3.1.4)
+# - CVE-2024-49766: safe_join UNC path bypass on Windows (fixed in 3.0.6)
 # - CVE-2024-34069: Werkzeug debugger RCE (fixed)
 # - CVE-2024-49767: Resource exhaustion via multipart/form-data (fixed)
 flask>=3.0.0
-Werkzeug>=3.1.6  # Security fix: CVE-2025-66221 (Windows device names)
\ No newline at end of file
+Werkzeug>=3.1.6  # Security fix: All Werkzeug CVEs fixed (Windows + Linux)
\ No newline at end of file