diff --git a/packages/dd-trace/test/appsec/iast/index.esm.spec.js b/packages/dd-trace/test/appsec/iast/index.esm.spec.js
index 389610e1582..210d0a2b7e6 100644
--- a/packages/dd-trace/test/appsec/iast/index.esm.spec.js
+++ b/packages/dd-trace/test/appsec/iast/index.esm.spec.js
@@ -49,7 +49,8 @@ describe('ESM', () => {
         await agent.stop()
       })
 
-      it('test endpoint have COMMAND_INJECTION vulnerability', async () => {
+      it('test endpoint have COMMAND_INJECTION vulnerability', async function () {
+        this.timeout(30000)
         await axios.get('/cmdi-vulnerable?args=-la')
 
         await agent.assertMessageReceived(({ payload }) => {