diff --git a/.github/actions/build-docker-images/action.yml b/.github/actions/build-docker-images/action.yml
index d3550a793e8..5977e2cd0ff 100644
--- a/.github/actions/build-docker-images/action.yml
+++ b/.github/actions/build-docker-images/action.yml
@@ -29,7 +29,7 @@ inputs:
   alpine-tag:
     description: "Alpine base image tag"
     required: false
-    default: "3.23.3"
+    default: "3.23.4"
   dockerhub-username:
     description: "Docker Hub username"
     required: false
diff --git a/.github/workflows/docker-build-manual.yml b/.github/workflows/docker-build-manual.yml
index 6dd95dac233..f48c5e34b4c 100644
--- a/.github/workflows/docker-build-manual.yml
+++ b/.github/workflows/docker-build-manual.yml
@@ -7,7 +7,7 @@ on:
       alpine-tag:
         description: "Alpine base image tag (e.g., 3.23.3)"
         required: true
-        default: "3.23.3"
+        default: "3.23.4"
       push:
         description: "Push images to Docker Hub"
         required: true
diff --git a/docker/docker-bake.hcl b/docker/docker-bake.hcl
index ee4471af1b8..c7e25cd2736 100644
--- a/docker/docker-bake.hcl
+++ b/docker/docker-bake.hcl
@@ -36,7 +36,7 @@ variable "TAG_LATEST" {
 # NOTE: We use just the tag without a digest pin because digest-pinned manifest lists
 # cause platform resolution issues in multi-arch buildx builds (InvalidBaseImagePlatform warnings).
 variable "ALPINE_TAG" {
-  default = "3.23.3"
+  default = "3.23.4"
 }
 
 target "admin-tools" {
diff --git a/docker/targets/admin-tools.Dockerfile b/docker/targets/admin-tools.Dockerfile
index ee3402dec44..a8efe74a558 100644
--- a/docker/targets/admin-tools.Dockerfile
+++ b/docker/targets/admin-tools.Dockerfile
@@ -3,7 +3,7 @@
 # - docker/targets/server.Dockerfile (ARG ALPINE_TAG)
 # NOTE: We use just the tag without a digest pin because digest-pinned manifest lists
 # cause platform resolution issues in multi-arch buildx builds (InvalidBaseImagePlatform warnings).
-ARG ALPINE_TAG=3.23.3
+ARG ALPINE_TAG=3.23.4
 
 FROM --platform=$TARGETPLATFORM alpine:${ALPINE_TAG}
 
diff --git a/docker/targets/server.Dockerfile b/docker/targets/server.Dockerfile
index e3ee6fed016..c19cc35ab41 100644
--- a/docker/targets/server.Dockerfile
+++ b/docker/targets/server.Dockerfile
@@ -3,7 +3,7 @@
 # - docker/targets/admin-tools.Dockerfile (ARG ALPINE_TAG)
 # NOTE: We use just the tag without a digest pin because digest-pinned manifest lists
 # cause platform resolution issues in multi-arch buildx builds (InvalidBaseImagePlatform warnings).
-ARG ALPINE_TAG=3.23.3
+ARG ALPINE_TAG=3.23.4
 
 FROM --platform=$TARGETPLATFORM alpine:${ALPINE_TAG}