diff --git a/tox.ini b/tox.ini
index ae8b21677..9a6fce0fa 100644
--- a/tox.ini
+++ b/tox.ini
@@ -14,9 +14,11 @@ download = true
 # building lxml from source takes too long on CI, force it to download pre-compiled
 # wheel or fail if none is found with --only-binary=lxml
 install_command = python -m pip install --only-binary=lxml {opts} {packages}
+# exclude pytest 8.0.{1,2} because our tests mysteriously fail with those
+# https://github.com/fonttools/fonttools/issues/3458
 deps =
     cov: coverage>=4.3
-    pytest>=7.0.0
+    pytest>=7.0.0,!=8.0.1,!=8.0.2
     pytest-randomly
     # add -noextra to tox -e to skip installing extras and only test the core fonttools
     !noextra: -rrequirements.txt