diff --git a/pkgs/by-name/mi/misskey/package.nix b/pkgs/by-name/mi/misskey/package.nix
index df5907190c31..6fe2fe4d4be5 100644
--- a/pkgs/by-name/mi/misskey/package.nix
+++ b/pkgs/by-name/mi/misskey/package.nix
@@ -3,6 +3,7 @@
   lib,
   nixosTests,
   fetchFromGitHub,
+  fetchpatch,
   nodejs,
   pnpm_9,
   makeWrapper,
@@ -28,6 +29,15 @@ stdenv.mkDerivation (finalAttrs: {
     fetchSubmodules = true;
   };
 
+  patches = [
+    (fetchpatch {
+      # https://github.com/misskey-dev/misskey/security/advisories/GHSA-w98m-j6hq-cwjm
+      name = "CVE-2025-24896.patch";
+      url = "https://github.com/misskey-dev/misskey/commit/ba9f295ef2bf31cc90fa587e20b9a7655b7a1824.patch";
+      hash = "sha256-jNl2AdLaG3v8QB5g/UPTupdyP1yGR0WcWull7EA7ogs=";
+    })
+  ];
+
   nativeBuildInputs = [
     nodejs
     pnpm_9.configHook