diff --git a/CHANGELOG.md b/CHANGELOG.md
index 511e4aede..1a70f9a19 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,7 @@ ENHANCEMENTS:
 * Update UI dependencies: `brace-expansion` to 1.1.18, `fast-uri` to 3.1.5, `immutable` to 5.1.9, `js-yaml` to 4.3.1, `nanoid` to 3.3.18, and `postcss` to 8.5.26. ([#5056](https://github.com/microsoft/AzureTRE/pull/5056))
 
 BUG FIXES:
+* Pin `starlette` in the API `requirements.txt` as it is imported directly in `main.py` (`API` 0.26.7) ([#5036](https://github.com/microsoft/AzureTRE/issues/5036))
 * Configure the default pytest-asyncio fixture loop scope to `function` to remove the deprecation warning. ([#5055](https://github.com/microsoft/AzureTRE/pull/5055))
 
 ## (0.29.0) (August 14, 2026)
diff --git a/api_app/_version.py b/api_app/_version.py
index 1932d0ba3..2f03f2531 100644
--- a/api_app/_version.py
+++ b/api_app/_version.py
@@ -1 +1 @@
-__version__ = "0.26.6"
+__version__ = "0.26.7"
diff --git a/api_app/requirements.txt b/api_app/requirements.txt
index f6ff5ba23..09565c7d1 100644
--- a/api_app/requirements.txt
+++ b/api_app/requirements.txt
@@ -22,5 +22,6 @@ PyJWT==2.13.0
 pytz==2025.2
 python-dateutil==2.9.0.post0
 semantic-version==2.10.0
+starlette==1.3.1
 uvicorn[standard]==0.40.0
 pydantic==2.13.4