diff --git a/CHANGELOG.md b/CHANGELOG.md
index d99fe116ec32b..04c6406df9e5f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -57,6 +57,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 - Bump `com.azure:azure-storage-common` from 12.29.0 to 12.29.1 ([#18742](https://github.com/opensearch-project/OpenSearch/pull/18742))
 - Bump `org.apache.commons:commons-lang3` from 3.17.0 to 3.18.0 ([#18745](https://github.com/opensearch-project/OpenSearch/pull/18745))
 - Bump `com.nimbusds:nimbus-jose-jwt` from 10.2 to 10.3.1 ([#18759](https://github.com/opensearch-project/OpenSearch/pull/18759))
+- Bump `commons-beanutils:commons-beanutils` from 1.9.4 to 1.11.0 ([#18401](https://github.com/opensearch-project/OpenSearch/issues/18401))
 
 ### Deprecated
 
diff --git a/plugins/identity-shiro/build.gradle b/plugins/identity-shiro/build.gradle
index b4952c8484a95..f72155e1d28b2 100644
--- a/plugins/identity-shiro/build.gradle
+++ b/plugins/identity-shiro/build.gradle
@@ -22,7 +22,7 @@ dependencies {
   // Needed for shiro
   implementation "org.slf4j:slf4j-api:${versions.slf4j}"
 
-  implementation 'commons-beanutils:commons-beanutils:1.9.4'
+  implementation 'commons-beanutils:commons-beanutils:1.11.0'
   implementation 'commons-logging:commons-logging:1.2'
   implementation 'commons-lang:commons-lang:2.6'
 
diff --git a/plugins/identity-shiro/licenses/commons-beanutils-1.11.0.jar.sha1 b/plugins/identity-shiro/licenses/commons-beanutils-1.11.0.jar.sha1
new file mode 100644
index 0000000000000..dabbd7d369c08
--- /dev/null
+++ b/plugins/identity-shiro/licenses/commons-beanutils-1.11.0.jar.sha1
@@ -0,0 +1 @@
+ac03ea606d13de04c2e4508227680faff151f491
\ No newline at end of file
diff --git a/plugins/identity-shiro/licenses/commons-beanutils-1.9.4.jar.sha1 b/plugins/identity-shiro/licenses/commons-beanutils-1.9.4.jar.sha1
deleted file mode 100644
index b91aa1e1d1f4f..0000000000000
--- a/plugins/identity-shiro/licenses/commons-beanutils-1.9.4.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-d52b9abcd97f38c81342bb7e7ae1eee9b73cba51
\ No newline at end of file