diff --git a/.changelog/21750.txt b/.changelog/21750.txt
new file mode 100644
index 000000000000..c30c08179b4b
--- /dev/null
+++ b/.changelog/21750.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+security: upgrade ubi base image to 9.4
+```
diff --git a/Dockerfile b/Dockerfile
index 55e5972bd9e5..dc617c5e0492 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -203,7 +203,7 @@ CMD ["agent", "-dev", "-client", "0.0.0.0"]
 
 # Red Hat UBI-based image
 # This target is used to build a Consul image for use on OpenShift.
-FROM registry.access.redhat.com/ubi9-minimal:9.3 as ubi
+FROM registry.access.redhat.com/ubi9-minimal:9.4 as ubi
 
 ARG PRODUCT_VERSION
 ARG PRODUCT_REVISION