diff --git a/responses_api_agents/osworld_agent/overrides.txt b/responses_api_agents/osworld_agent/overrides.txt
index 2831314f96..a9b6c0f7c6 100644
--- a/responses_api_agents/osworld_agent/overrides.txt
+++ b/responses_api_agents/osworld_agent/overrides.txt
@@ -11,6 +11,10 @@ torch==2.11.0
 # another Gym server on the repository's Python 3.13 line.
 matplotlib==3.10.6
 
+# OSWorld pins pillow<11.1.dev0 (CVE-affected). Bypass the stale constraint
+# to install the patched version already used elsewhere in the repo.
+pillow==12.3.0
+
 # SurferH is not loaded by this Gym adapter, and agp-client is not published on
 # the configured package indexes.
 agp-client; sys_platform == 'never'
diff --git a/responses_api_agents/osworld_agent/requirements.txt b/responses_api_agents/osworld_agent/requirements.txt
index 41dcea31d4..8ca399185b 100644
--- a/responses_api_agents/osworld_agent/requirements.txt
+++ b/responses_api_agents/osworld_agent/requirements.txt
@@ -35,7 +35,9 @@ numpy<2
 pynput
 ag2
 
-Pillow~=11.0.0
+# osworld pins pillow>=11.0.0,<11.1.dev0; overrides.txt bypasses that stale
+# constraint so the CVE fix can install.
+Pillow==12.3.0
 scikit-learn
 matplotlib~=3.7.4
 func-timeout