diff --git a/Gemfile b/Gemfile
index 1f9eef21a..f6a763287 100644
--- a/Gemfile
+++ b/Gemfile
@@ -10,7 +10,7 @@ gem 'activerecord-session_store' # Switch to AR session storage in case of failu
 gem 'base64', '~> 0.2.0' # ruby 3.4.0 warning said to add
 gem 'bcrypt', '~> 3.1.20'
 gem 'bootsnap', require: false
-gem 'cancancan', '~> 1.13', '>= 1.13.1' # Use cancancan for authorization
+gem 'cancancan', '~> 3.6' # Use cancancan for authorization
 gem 'config'
 gem 'csv', '~> 3.3' # ruby 3.4.0 warning said to add
 gem 'devise' # Use devise for authentication
diff --git a/Gemfile.lock b/Gemfile.lock
index fd4d2c526..48e0d63aa 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -126,7 +126,7 @@ GEM
       bundler (>= 1.2.0, < 3)
       thor (~> 1.0)
     byebug (11.1.3)
-    cancancan (1.17.0)
+    cancancan (3.6.1)
     capybara (3.40.0)
       addressable
       matrix
@@ -543,7 +543,7 @@ DEPENDENCIES
   brakeman
   bundler-audit
   byebug
-  cancancan (~> 1.13, >= 1.13.1)
+  cancancan (~> 3.6)
   capybara (= 3.40.0)
   config
   csv (~> 3.3)