diff --git a/charts/chart_versions.yaml b/charts/chart_versions.yaml
index fe64f4d1e5..0a933bafdf 100644
--- a/charts/chart_versions.yaml
+++ b/charts/chart_versions.yaml
@@ -1,5 +1,5 @@
 charts:
-  - version: 1.16.501
+  - version: 1.16.601
     filename: /charts/rke2-cilium.yaml
     bootstrap: true
   - version: v3.29.1-build2025011000
diff --git a/scripts/build-images b/scripts/build-images
index 3e3ceaffb4..c43a2b3330 100755
--- a/scripts/build-images
+++ b/scripts/build-images
@@ -40,16 +40,16 @@ EOF
 if [ "${GOARCH}" != "s390x" ]; then
 xargs -n1 -t docker image pull --quiet << EOF > build/images-cilium.txt
     ${REGISTRY}/rancher/mirrored-cilium-certgen:v0.2.0
-    ${REGISTRY}/rancher/mirrored-cilium-cilium:v1.16.5
-    ${REGISTRY}/rancher/mirrored-cilium-cilium-envoy:v1.30.8-1733837904-eaae5aca0fb988583e5617170a65ac5aa51c0aa8
-    ${REGISTRY}/rancher/mirrored-cilium-clustermesh-apiserver:v1.16.5
-    ${REGISTRY}/rancher/mirrored-cilium-hubble-relay:v1.16.5
+    ${REGISTRY}/rancher/mirrored-cilium-cilium:v1.16.6
+    ${REGISTRY}/rancher/mirrored-cilium-cilium-envoy:v1.30.9-1737073743-40a016d11c0d863b772961ed0168eea6fe6b10a5
+    ${REGISTRY}/rancher/mirrored-cilium-clustermesh-apiserver:v1.16.6
+    ${REGISTRY}/rancher/mirrored-cilium-hubble-relay:v1.16.6
     ${REGISTRY}/rancher/mirrored-cilium-hubble-ui:v0.13.1
     ${REGISTRY}/rancher/mirrored-cilium-hubble-ui-backend:v0.13.1
-    ${REGISTRY}/rancher/mirrored-cilium-operator-aws:v1.16.5
-    ${REGISTRY}/rancher/mirrored-cilium-operator-azure:v1.16.5
-    ${REGISTRY}/rancher/mirrored-cilium-operator-generic:v1.16.5
-    ${REGISTRY}/rancher/hardened-cni-plugins:v1.6.0-build20241022
+    ${REGISTRY}/rancher/mirrored-cilium-operator-aws:v1.16.6
+    ${REGISTRY}/rancher/mirrored-cilium-operator-azure:v1.16.6
+    ${REGISTRY}/rancher/mirrored-cilium-operator-generic:v1.16.6
+    ${REGISTRY}/rancher/hardened-cni-plugins:v1.6.2-build20250124
 EOF
 
 xargs -n1 -t docker image pull --quiet << EOF > build/images-calico.txt