diff --git a/dubbo-dependencies-bom/pom.xml b/dubbo-dependencies-bom/pom.xml
index c9ded00e6f34..7a1292e402ee 100644
--- a/dubbo-dependencies-bom/pom.xml
+++ b/dubbo-dependencies-bom/pom.xml
@@ -151,7 +151,7 @@
     <log4j_version>1.2.17</log4j_version>
     <logback_version>1.2.13</logback_version>
     <!-- Fix the bug of log4j refer:https://github.com/apache/logging-log4j2/pull/608 -->
-    <log4j2_version>2.25.3</log4j2_version>
+    <log4j2_version>2.25.4</log4j2_version>
     <commons_io_version>2.21.0</commons_io_version>
     <commons-codec_version>1.21.0</commons-codec_version>
     <groovy_version>4.0.30</groovy_version>