diff --git a/distribution/server/src/assemble/LICENSE.bin.txt b/distribution/server/src/assemble/LICENSE.bin.txt
index 3bbb5183b0f7f..9776e2237f94f 100644
--- a/distribution/server/src/assemble/LICENSE.bin.txt
+++ b/distribution/server/src/assemble/LICENSE.bin.txt
@@ -409,7 +409,9 @@ The Apache Software License, Version 2.0
  * OkHttp3
      - com.squareup.okhttp3-logging-interceptor-4.9.3.jar
      - com.squareup.okhttp3-okhttp-4.9.3.jar
- * Okio - com.squareup.okio-okio-2.8.0.jar
+ * Okio
+     - com.squareup.okio-okio-3.4.0.jar
+     - com.squareup.okio-okio-jvm-3.4.0.jar
  * Javassist -- org.javassist-javassist-3.25.0-GA.jar
  * Kotlin Standard Lib
      - org.jetbrains.kotlin-kotlin-stdlib-1.8.20.jar
diff --git a/pom.xml b/pom.xml
index 328adffe9dd79..a299674f65b92 100644
--- a/pom.xml
+++ b/pom.xml
@@ -234,7 +234,7 @@ flexible messaging model and an intuitive client API.</description>
     <kubernetesclient.version>18.0.0</kubernetesclient.version>
     <okhttp3.version>4.9.3</okhttp3.version>
     <!-- use okio version that matches the okhttp3 version -->
-    <okio.version>2.8.0</okio.version>
+    <okio.version>3.4.0</okio.version>
     <!-- override kotlin-stdlib used by okio in order to address CVE-2020-29582 -->
     <kotlin-stdlib.version>1.8.20</kotlin-stdlib.version>
     <nsq-client.version>1.0</nsq-client.version>