diff --git a/pom.xml b/pom.xml
index 4481607165db..c5c43022857e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -192,7 +192,7 @@
     <mockito-core.version>5.17.0</mockito-core.version>
     <mockito-inline.version>5.2.0</mockito-inline.version>
     <mina.version>2.0.0-M5</mina.version>
-    <netty.version>4.1.127.Final</netty.version>
+    <netty.version>4.1.135.Final</netty.version>
     <netty3.version>3.10.5.Final</netty3.version>
     <!-- used by druid storage handler -->
     <pac4j-saml.version>4.5.8</pac4j-saml.version>
diff --git a/standalone-metastore/pom.xml b/standalone-metastore/pom.xml
index 2eb75caf9281..3cd271713274 100644
--- a/standalone-metastore/pom.xml
+++ b/standalone-metastore/pom.xml
@@ -105,7 +105,7 @@
     <reflections.version>0.10.2</reflections.version>
     <io.grpc.version>1.72.0</io.grpc.version>
     <sqlline.version>1.9.0</sqlline.version>
-    <netty.version>4.1.127.Final</netty.version>
+    <netty.version>4.1.135.Final</netty.version>
     <!-- HIVE-28992: only upgrade to newer than 3.25.0 if you tested the prompt -->
     <jline.version>3.25.0</jline.version>
     <ST4.version>4.0.4</ST4.version>
diff --git a/storage-api/pom.xml b/storage-api/pom.xml
index 3627fc9cf270..f439ec92ca7e 100644
--- a/storage-api/pom.xml
+++ b/storage-api/pom.xml
@@ -29,7 +29,7 @@
     <checkstyle.version>11.1.0</checkstyle.version>
     <maven.compiler.source>21</maven.compiler.source>
     <maven.compiler.target>21</maven.compiler.target>
-    <netty.version>4.1.127.Final</netty.version>
+    <netty.version>4.1.135.Final</netty.version>
     <guava.version>22.0</guava.version>
     <hadoop.version>3.4.2</hadoop.version>
     <junit.version>4.13.2</junit.version>