diff --git a/services/vault/k8s-auth-config-cronjob.yaml b/services/vault/k8s-auth-config-cronjob.yaml
index 1908de30d..11d0a7da9 100644
--- a/services/vault/k8s-auth-config-cronjob.yaml
+++ b/services/vault/k8s-auth-config-cronjob.yaml
@@ -24,7 +24,7 @@ spec:
             node-role.kubernetes.io/worker: "true"
           containers:
             - name: configure-k8s-auth
-              image: hashicorp/vault:1.19.5
+              image: hashicorp/vault:1.20.4
               imagePullPolicy: IfNotPresent
               command:
                 - sh
diff --git a/services/vault/oidc-config-cronjob.yaml b/services/vault/oidc-config-cronjob.yaml
index 0da75b890..21f3bfa53 100644
--- a/services/vault/oidc-config-cronjob.yaml
+++ b/services/vault/oidc-config-cronjob.yaml
@@ -51,7 +51,7 @@ spec:
             node-role.kubernetes.io/worker: "true"
           containers:
             - name: configure-oidc
-              image: hashicorp/vault:1.19.5
+              image: hashicorp/vault:1.20.4
               imagePullPolicy: IfNotPresent
               command:
                 - /entrypoint.sh
diff --git a/services/vault/statefulset.yaml b/services/vault/statefulset.yaml
index 166f3d171..6fa32e18e 100644
--- a/services/vault/statefulset.yaml
+++ b/services/vault/statefulset.yaml
@@ -45,7 +45,7 @@ spec:
               mountPath: /vault/config
       containers:
         - name: vault
-          image: hashicorp/vault:1.19.5
+          image: hashicorp/vault:1.20.4
           imagePullPolicy: IfNotPresent
           command: ["vault"]
           args: ["server", "-config=/vault/config/local.hcl"]