diff --git a/CHANGELOG.md b/CHANGELOG.md
index ec556f0a70..68384915c9 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -19,6 +19,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 - Bump `org.junit.jupiter:junit-jupiter` from 5.13.4 to 5.14.0 ([#5678](https://github.com/opensearch-project/security/pull/5678))
 - Bump `ch.qos.logback:logback-classic` from 1.5.18 to 1.5.19 ([#5680](https://github.com/opensearch-project/security/pull/5680))
 - Bump `org.scala-lang:scala-library` from 2.13.16 to 2.13.17 ([#5682](https://github.com/opensearch-project/security/pull/5682))
+- Bump `org.ow2.asm:asm` from 9.8 to 9.9 ([#5707](https://github.com/opensearch-project/security/pull/5707))
 - Bump `stefanzweifel/git-auto-commit-action` from 6 to 7 ([#5704](https://github.com/opensearch-project/security/pull/5704))
 - Bump `net.bytebuddy:byte-buddy` from 1.17.7 to 1.17.8 ([#5703](https://github.com/opensearch-project/security/pull/5703))
 - Bump `derek-ho/start-opensearch` from 7 to 9 ([#5630](https://github.com/opensearch-project/security/pull/5630), [#5679](https://github.com/opensearch-project/security/pull/5679))
diff --git a/build.gradle b/build.gradle
index 54ee5f8f18..e4b9e09a38 100644
--- a/build.gradle
+++ b/build.gradle
@@ -489,7 +489,7 @@ configurations {
             force "org.hamcrest:hamcrest:2.2"
             force "org.mockito:mockito-core:5.20.0"
             force "net.bytebuddy:byte-buddy:1.17.8"
-            force "org.ow2.asm:asm:9.8"
+            force "org.ow2.asm:asm:9.9"
             force "com.google.j2objc:j2objc-annotations:3.1"
 
             // For org.opensearch.plugin:transport-grpc
@@ -693,7 +693,7 @@ dependencies {
     compileOnly 'com.google.errorprone:error_prone_annotations:2.42.0'
     runtimeOnly 'com.sun.istack:istack-commons-runtime:4.2.0'
     runtimeOnly 'jakarta.xml.bind:jakarta.xml.bind-api:4.0.4'
-    runtimeOnly 'org.ow2.asm:asm:9.8'
+    runtimeOnly 'org.ow2.asm:asm:9.9'
 
     testImplementation 'org.apache.camel:camel-xmlsecurity:3.22.4'