diff --git a/tests/security-prompt-injection.test.cjs b/tests/security-prompt-injection.test.cjs
index b3621c368..fc7e63bbe 100644
--- a/tests/security-prompt-injection.test.cjs
+++ b/tests/security-prompt-injection.test.cjs
@@ -646,7 +646,7 @@ describe('validatePath: hostile path values are rejected before write', () => {
     assert.strictEqual(r.safe, false,
       'a symlink whose target is outside the base must fail containment');
     // Cleanup the outside dir; the link itself is cleaned by cleanup(tmpDir).
-    fs.rmSync(outside, { recursive: true, force: true });
+    fs.rmSync(outside, { recursive: true, force: true, maxRetries: 20, retryDelay: 250 });
   });
 });