diff --git a/internal/recipe/pip.go b/internal/recipe/pip.go
index ba90aee..9f333fa 100644
--- a/internal/recipe/pip.go
+++ b/internal/recipe/pip.go
@@ -48,6 +48,7 @@ func (p *PipRecipe) Build(ctx context.Context, s *stack.Stack, src *source.Input
 		ExtraDeps: []string{
 			"setuptools",
 			"wheel>=0.46.2", // CVE-2026-24049
+			"flit-core>=3.11", // build backend required by pip 26.x (downloaded as wheel to avoid circular dep)
 		},
 	}).Build(ctx, s, src, r, out)
 }