diff --git a/core/modules/system/system.routing.yml b/core/modules/system/system.routing.yml
index fecfd249..544c005 100644
--- a/core/modules/system/system.routing.yml
+++ b/core/modules/system/system.routing.yml
@@ -219,6 +219,7 @@ system.run_cron:
     _controller: '\Drupal\system\CronController::runManually'
   requirements:
     _permission: 'administer site configuration'
+    _csrf_token: 'TRUE'
 
 entity.date_format.collection:
   path: '/admin/config/regional/date-time'