diff --git a/pkgs/applications/networking/cluster/rke2/default.nix b/pkgs/applications/networking/cluster/rke2/default.nix
index a76456652e5d..3c18bf06b6d8 100644
--- a/pkgs/applications/networking/cluster/rke2/default.nix
+++ b/pkgs/applications/networking/cluster/rke2/default.nix
@@ -5,7 +5,9 @@ let
   extraArgs = removeAttrs args [ "callPackage" ];
 in
 rec {
-  rke2_1_33 = common (import ./1_33/versions.nix) extraArgs;
+  rke2_1_33 = (common (import ./1_33/versions.nix) extraArgs).overrideAttrs {
+    meta.knownVulnerabilities = [ "rke2_1_33 has reached end-of-life on 2026-06-28" ];
+  };
 
   rke2_1_34 = common (import ./1_34/versions.nix) extraArgs;