diff --git a/CHANGELOG.md b/CHANGELOG.md
index 198c3638752e2..beda1e9026160 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -19,6 +19,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 - Bump `com.nimbusds:oauth2-oidc-sdk` from 11.9.1 to 11.19.1 ([#15862](https://github.com/opensearch-project/OpenSearch/pull/15862))
 - Bump `com.microsoft.azure:msal4j` from 1.17.0 to 1.17.1 ([#15945](https://github.com/opensearch-project/OpenSearch/pull/15945))
 - Bump `ch.qos.logback:logback-core` from 1.5.6 to 1.5.8 ([#15946](https://github.com/opensearch-project/OpenSearch/pull/15946))
+- Update protobuf from 3.25.4 to 3.25.5 ([#16011](https://github.com/opensearch-project/OpenSearch/pull/16011))
 
 ### Changed
 
diff --git a/buildSrc/version.properties b/buildSrc/version.properties
index ea04bd1e33d4a..d987fe9ad04ae 100644
--- a/buildSrc/version.properties
+++ b/buildSrc/version.properties
@@ -20,7 +20,7 @@ woodstox          = 6.4.0
 kotlin            = 1.7.10
 antlr4            = 4.13.1
 guava             = 32.1.1-jre
-protobuf          = 3.25.4
+protobuf          = 3.25.5
 jakarta_annotation = 1.3.5
 google_http_client = 1.44.1
 tdigest           = 3.2
diff --git a/server/licenses/protobuf-java-3.25.4.jar.sha1 b/server/licenses/protobuf-java-3.25.4.jar.sha1
deleted file mode 100644
index 21b6fdfd24dc8..0000000000000
--- a/server/licenses/protobuf-java-3.25.4.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-43fcb86e4a411516c7fc681450f1516de0b862a2
\ No newline at end of file
diff --git a/server/licenses/protobuf-java-3.25.5.jar.sha1 b/server/licenses/protobuf-java-3.25.5.jar.sha1
new file mode 100644
index 0000000000000..72b42c9efc85a
--- /dev/null
+++ b/server/licenses/protobuf-java-3.25.5.jar.sha1
@@ -0,0 +1 @@
+5ae5c9ec39930ae9b5a61b32b93288818ec05ec1
\ No newline at end of file