diff --git a/images/chromium-headful/Dockerfile b/images/chromium-headful/Dockerfile
index 3f7578c3..6a8afff6 100644
--- a/images/chromium-headful/Dockerfile
+++ b/images/chromium-headful/Dockerfile
@@ -306,7 +306,7 @@ RUN --mount=type=cache,target=/var/cache/apt,sharing=locked,id=$CACHEIDPREFIX-ap
 
 # Install Chrome + ChromeDriver as a matched pair from chrome-for-testing so they cannot drift apart.
 # Regional pack filenames preserve each locale identifier while reusing en-GB UI strings.
-ARG CHROME_VERSION=152.0.7977.42
+ARG CHROME_VERSION=155.0.8059.84
 RUN set -eux; \
     curl -fsSL "https://storage.googleapis.com/chrome-for-testing-public/${CHROME_VERSION}/linux64/chrome-linux64.zip" -o /tmp/chrome.zip; \
     curl -fsSL "https://storage.googleapis.com/chrome-for-testing-public/${CHROME_VERSION}/linux64/chromedriver-linux64.zip" -o /tmp/cd.zip; \
diff --git a/images/chromium-headless/image/Dockerfile b/images/chromium-headless/image/Dockerfile
index b8956192..ad64dc9f 100644
--- a/images/chromium-headless/image/Dockerfile
+++ b/images/chromium-headless/image/Dockerfile
@@ -180,7 +180,7 @@ RUN --mount=type=cache,target=/var/cache/apt,sharing=locked,id=$CACHEIDPREFIX-ap
 
 # Install Chrome + ChromeDriver as a matched pair from chrome-for-testing so they cannot drift apart.
 # Regional pack filenames preserve each locale identifier while reusing en-GB UI strings.
-ARG CHROME_VERSION=152.0.7977.42
+ARG CHROME_VERSION=155.0.8059.84
 RUN set -eux; \
     curl -fsSL "https://storage.googleapis.com/chrome-for-testing-public/${CHROME_VERSION}/linux64/chrome-linux64.zip" -o /tmp/chrome.zip; \
     curl -fsSL "https://storage.googleapis.com/chrome-for-testing-public/${CHROME_VERSION}/linux64/chromedriver-linux64.zip" -o /tmp/cd.zip; \
diff --git a/server/e2e/testdata/webmcp/README.md b/server/e2e/testdata/webmcp/README.md
index 593ef541..1cd19ffe 100644
--- a/server/e2e/testdata/webmcp/README.md
+++ b/server/e2e/testdata/webmcp/README.md
@@ -13,7 +13,7 @@ E2E_CHROMIUM_HEADLESS_IMAGE=kernel-headless-test \
   GOFLAGS='-run=TestPlaywrightExecuteAPI/WebMCPDeclarative -count=1' make test-e2e
 ```
 
-Chromium 152.0.7977.42 with the image's default WebMCP flags exposes `reserve_table` with string name/date fields, a numeric party size with bounds, and a seating enum. It adds a date format hint to the field description. Both top-level and embedded invocations return `completed` and the submitted values; the tests also read the DOM through `/playwright/execute` to verify native agent submission occurred exactly once. Discovery and invocation responses are logged by the test. Missing declarative tools fail the test rather than silently skipping supported behavior.
+Chromium 155.0.8059.84 with the image's default WebMCP flags exposes `reserve_table` with string name/date fields, a numeric party size with bounds, and a seating enum. It adds a date format hint to the field description. Both top-level and embedded invocations return `completed` and the submitted values; the tests also read the DOM through `/playwright/execute` to verify native agent submission occurred exactly once. Discovery and invocation responses are logged by the test. Missing declarative tools fail the test rather than silently skipping supported behavior.
 
 # Polyfill WebMCP fixture