diff --git a/automatic_updates.routing.yml b/automatic_updates.routing.yml
index aa7ef7e749407d90ea15dd3943a5a6c4bc777e99..64909e0ed0e96204506feb061817e2132df966e8 100644
--- a/automatic_updates.routing.yml
+++ b/automatic_updates.routing.yml
@@ -23,5 +23,6 @@ automatic_updates.inplace-update:
     _controller: '\Drupal\automatic_updates\Controller\InPlaceUpdateController::update'
   requirements:
     _permission: 'administer software updates'
+    _csrf_token: 'TRUE'
   options:
     no_cache: 'TRUE'