diff --git a/DEPENDENCY-LICENSES b/DEPENDENCY-LICENSES
index 24ed9a1aeef..a51d19b65ef 100644
--- a/DEPENDENCY-LICENSES
+++ b/DEPENDENCY-LICENSES
@@ -64,8 +64,8 @@ List of third-party dependencies grouped by their license type.
         * Apache HttpComponents Core HTTP/2 (org.apache.httpcomponents.core5:httpcore5-h2:5.2 - https://hc.apache.org/httpcomponents-core-5.2.x/5.2/httpcore5-h2/)
         * Apache HttpCore (org.apache.httpcomponents:httpcore:4.4.16 - http://hc.apache.org/httpcomponents-core-ga)
         * Apache Kafka (org.apache.kafka:kafka-clients:4.1.0 - https://kafka.apache.org)
-        * Apache Log4j API (org.apache.logging.log4j:log4j-api:2.25.1 - https://logging.apache.org/log4j/2.x/)
-        * Apache Log4j Core (org.apache.logging.log4j:log4j-core:2.25.1 - https://logging.apache.org/log4j/2.x/)
+        * Apache Log4j API (org.apache.logging.log4j:log4j-api:2.25.2 - https://logging.apache.org/log4j/2.x/)
+        * Apache Log4j Core (org.apache.logging.log4j:log4j-core:2.25.2 - https://logging.apache.org/log4j/2.x/)
         * Apache Maven Shade Plugin (org.apache.maven.plugins:maven-shade-plugin:3.6.1 - https://maven.apache.org/plugins/maven-shade-plugin/)
         * Apache Maven Shared Utils (org.apache.maven.shared:maven-shared-utils:3.2.1 - https://maven.apache.org/shared/maven-shared-utils/)
         * Apache Thrift (org.apache.thrift:libthrift:0.22.0 - https://thrift.apache.org/)
@@ -257,7 +257,7 @@ List of third-party dependencies grouped by their license type.
         * Prometheus Metrics Tracer OpenTelemetry (io.prometheus:prometheus-metrics-tracer-otel:1.4.1 - https://github.com/prometheus/client_java/client_java/prometheus-metrics-tracer/prometheus-metrics-tracer-otel)
         * Prometheus Metrics Tracer OpenTelemetry Agent (io.prometheus:prometheus-metrics-tracer-otel-agent:1.4.1 - https://github.com/prometheus/client_java/client_java/prometheus-metrics-tracer/prometheus-metrics-tracer-otel-agent)
         * sigar (org.fusesource:sigar:1.6.4 - http://fusesource.com/sigar/)
-        * SLF4J 2 Provider for Log4j API (org.apache.logging.log4j:log4j-slf4j2-impl:2.25.1 - https://logging.apache.org/log4j/2.x/)
+        * SLF4J 2 Provider for Log4j API (org.apache.logging.log4j:log4j-slf4j2-impl:2.25.2 - https://logging.apache.org/log4j/2.x/)
         * SnakeYAML (org.yaml:snakeyaml:2.2 - https://bitbucket.org/snakeyaml/snakeyaml)
         * snappy-java (org.xerial.snappy:snappy-java:1.1.10.8 - https://github.com/xerial/snappy-java)
         * Spring AOP (org.springframework:spring-aop:6.2.11 - https://github.com/spring-projects/spring-framework)
diff --git a/LICENSE-binary b/LICENSE-binary
index e8cdf236446..e8b8a565a00 100644
--- a/LICENSE-binary
+++ b/LICENSE-binary
@@ -701,9 +701,9 @@ The license texts of these dependencies can be found in the licenses directory.
         * Apache HttpClient (org.apache.httpcomponents:httpclient:4.5.14 - http://hc.apache.org/httpcomponents-client-ga)
         * Apache HttpCore (org.apache.httpcomponents:httpcore:4.4.16 - http://hc.apache.org/httpcomponents-core-ga)
         * Apache Kafka (org.apache.kafka:kafka-clients:4.1.0 - https://kafka.apache.org)
-        * Apache Log4j API (org.apache.logging.log4j:log4j-api:2.25.1 - https://logging.apache.org/log4j/2.x/log4j-api/)
-        * Apache Log4j Core (org.apache.logging.log4j:log4j-core:2.25.1 - https://logging.apache.org/log4j/2.x/log4j-core/)
-        * Apache Log4j SLF4J Binding (org.apache.logging.log4j:log4j-slf4j2-impl:2.25.1 - https://logging.apache.org/log4j/2.x/log4j-slf4j2-impl/)
+        * Apache Log4j API (org.apache.logging.log4j:log4j-api:2.25.2 - https://logging.apache.org/log4j/2.x/log4j-api/)
+        * Apache Log4j Core (org.apache.logging.log4j:log4j-core:2.25.2 - https://logging.apache.org/log4j/2.x/log4j-core/)
+        * Apache Log4j SLF4J Binding (org.apache.logging.log4j:log4j-slf4j2-impl:2.25.2 - https://logging.apache.org/log4j/2.x/log4j-slf4j2-impl/)
         * Apache Thrift (org.apache.thrift:libthrift:0.22.0 - libthrift:0.22.0rift.apache.org)
         * Apache Yetus - Audience Annotations (org.apache.yetus:audience-annotations:0.12.0 - https://yetus.apache.org/audience-annotations)
         * Apache Yetus - Audience Annotations (org.apache.yetus:audience-annotations:0.13.0 - https://yetus.apache.org/audience-annotations)
diff --git a/pom.xml b/pom.xml
index 1b1fd2a9c8c..e80ba5f756c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -107,7 +107,7 @@
         <netty-tcnative.version>2.0.73.Final</netty-tcnative.version>
         <netty.version>4.2.6.Final</netty.version>
         <sysout-over-slf4j.version>1.0.2</sysout-over-slf4j.version>
-        <log4j.version>2.25.1</log4j.version>
+        <log4j.version>2.25.2</log4j.version>
         <slf4j.version>2.0.17</slf4j.version>
         <metrics.version>4.2.37</metrics.version>
         <mockito.version>5.14.2</mockito.version>