diff --git a/pkgs/applications/networking/cluster/k3s/default.nix b/pkgs/applications/networking/cluster/k3s/default.nix
index fafe11745677..378edac6db29 100644
--- a/pkgs/applications/networking/cluster/k3s/default.nix
+++ b/pkgs/applications/networking/cluster/k3s/default.nix
@@ -12,7 +12,9 @@ let
   extraArgs = removeAttrs args [ "callPackage" ];
 in
 {
-  k3s_1_33 = common (import ./1_33/versions.nix) extraArgs;
+  k3s_1_33 = (common (import ./1_33/versions.nix) extraArgs).overrideAttrs {
+    meta.knownVulnerabilities = [ "k3s_1_33 has reached end-of-life on 2026-06-28" ];
+  };
 
   k3s_1_34 = (common (import ./1_34/versions.nix) extraArgs).overrideAttrs {
     patches = [ ./go_runc_require.patch ];