diff --git a/docker/hub-agent.Dockerfile b/docker/hub-agent.Dockerfile
index 99a813377..2098fa0e6 100644
--- a/docker/hub-agent.Dockerfile
+++ b/docker/hub-agent.Dockerfile
@@ -62,7 +62,7 @@ RUN echo "Building hubagent with GOOS=${TARGETOS} GOARCH=${TARGETARCH} CC=$(read
 # The pinned digest must reference a multi-arch image index so BuildKit can
 # resolve the matching base layer for each target architecture.
 # Refer to https://github.com/GoogleContainerTools/distroless for more details
-FROM gcr.io/distroless/base:nonroot@sha256:2d7d29b504e7166f6d0c7655a18ebf5def5b37b029f8c4f8667e434ba774844f
+FROM gcr.io/distroless/base:nonroot@sha256:d199d20fb09c898d8822ae5cbd5cf3c6d424e9b5e1fc2eb9a719a7752cd9d861
 WORKDIR /
 COPY --link --from=builder /workspace/hubagent .
 USER 65532:65532
diff --git a/docker/member-agent.Dockerfile b/docker/member-agent.Dockerfile
index f05cf953b..4f0c1eb01 100644
--- a/docker/member-agent.Dockerfile
+++ b/docker/member-agent.Dockerfile
@@ -62,7 +62,7 @@ RUN echo "Building memberagent with GOOS=${TARGETOS} GOARCH=${TARGETARCH} CC=$(r
 # The pinned digest must reference a multi-arch image index so BuildKit can
 # resolve the matching base layer for each target architecture.
 # Refer to https://github.com/GoogleContainerTools/distroless for more details
-FROM gcr.io/distroless/base:nonroot@sha256:2d7d29b504e7166f6d0c7655a18ebf5def5b37b029f8c4f8667e434ba774844f
+FROM gcr.io/distroless/base:nonroot@sha256:d199d20fb09c898d8822ae5cbd5cf3c6d424e9b5e1fc2eb9a719a7752cd9d861
 WORKDIR /
 COPY --link --from=builder /workspace/memberagent .
 USER 65532:65532
diff --git a/docker/refresh-token.Dockerfile b/docker/refresh-token.Dockerfile
index 75b2a98a8..007cd723c 100644
--- a/docker/refresh-token.Dockerfile
+++ b/docker/refresh-token.Dockerfile
@@ -63,7 +63,7 @@ RUN echo "Building refreshtoken with GOOS=${TARGETOS} GOARCH=${TARGETARCH} CC=$(
 # The pinned digest must reference a multi-arch image index so BuildKit can
 # resolve the matching base layer for each target architecture.
 # Refer to https://github.com/GoogleContainerTools/distroless for more details
-FROM gcr.io/distroless/base:nonroot@sha256:2d7d29b504e7166f6d0c7655a18ebf5def5b37b029f8c4f8667e434ba774844f
+FROM gcr.io/distroless/base:nonroot@sha256:d199d20fb09c898d8822ae5cbd5cf3c6d424e9b5e1fc2eb9a719a7752cd9d861
 WORKDIR /
 COPY --link --from=builder /workspace/refreshtoken .
 USER 65532:65532