diff --git a/src/istio/common/zarf.yaml b/src/istio/common/zarf.yaml
index 9de933358..7e7038d46 100644
--- a/src/istio/common/zarf.yaml
+++ b/src/istio/common/zarf.yaml
@@ -13,11 +13,11 @@ components:
     charts:
       - name: base
         url: https://istio-release.storage.googleapis.com/charts
-        version: 1.23.2
+        version: 1.23.3
         namespace: istio-system
       - name: istiod
         url: https://istio-release.storage.googleapis.com/charts
-        version: 1.23.2
+        version: 1.23.3
         namespace: istio-system
         valuesFiles:
           - "../values/values.yaml"
diff --git a/src/istio/values/registry1-values.yaml b/src/istio/values/registry1-values.yaml
index 17f229fea..fceaafa6d 100644
--- a/src/istio/values/registry1-values.yaml
+++ b/src/istio/values/registry1-values.yaml
@@ -6,7 +6,7 @@ pilot:
 global:
   proxy_init:
     # renovate: image=registry1.dso.mil/ironbank/tetrate/istio/proxyv2
-    image: "###ZARF_REGISTRY###/ironbank/tetrate/istio/proxyv2:1.23.2-tetratefips-v0"
+    image: "###ZARF_REGISTRY###/ironbank/tetrate/istio/proxyv2:1.23.3-tetratefips-v0"
   proxy:
     # renovate: image=registry1.dso.mil/ironbank/tetrate/istio/proxyv2
-    image: "###ZARF_REGISTRY###/ironbank/tetrate/istio/proxyv2:1.23.2-tetratefips-v0"
+    image: "###ZARF_REGISTRY###/ironbank/tetrate/istio/proxyv2:1.23.3-tetratefips-v0"
diff --git a/src/istio/values/upstream-values.yaml b/src/istio/values/upstream-values.yaml
index 800d39f62..6c1575306 100644
--- a/src/istio/values/upstream-values.yaml
+++ b/src/istio/values/upstream-values.yaml
@@ -2,11 +2,11 @@
 # SPDX-License-Identifier: AGPL-3.0-or-later OR LicenseRef-Defense-Unicorns-Commercial
 
 pilot:
-  image: "docker.io/istio/pilot:1.23.2-distroless"
+  image: "docker.io/istio/pilot:1.23.3-distroless"
 global:
   proxy_init:
     # renovate: image=docker.io/istio/proxyv2
-    image: "###ZARF_REGISTRY###/istio/proxyv2:1.23.2-distroless"
+    image: "###ZARF_REGISTRY###/istio/proxyv2:1.23.3-distroless"
   proxy:
     # renovate: image=docker.io/istio/proxyv2
-    image: "###ZARF_REGISTRY###/istio/proxyv2:1.23.2-distroless"
+    image: "###ZARF_REGISTRY###/istio/proxyv2:1.23.3-distroless"
diff --git a/src/istio/zarf.yaml b/src/istio/zarf.yaml
index 21bae304e..175aea4bf 100644
--- a/src/istio/zarf.yaml
+++ b/src/istio/zarf.yaml
@@ -24,8 +24,8 @@ components:
         valuesFiles:
           - "values/upstream-values.yaml"
     images:
-      - "docker.io/istio/pilot:1.23.2-distroless"
-      - "docker.io/istio/proxyv2:1.23.2-distroless"
+      - "docker.io/istio/pilot:1.23.3-distroless"
+      - "docker.io/istio/proxyv2:1.23.3-distroless"
 
   - name: istio-controlplane
     required: true
@@ -38,7 +38,7 @@ components:
         valuesFiles:
           - "values/registry1-values.yaml"
     images:
-      - registry1.dso.mil/ironbank/tetrate/istio/proxyv2:1.23.2-tetratefips-v0
+      - registry1.dso.mil/ironbank/tetrate/istio/proxyv2:1.23.3-tetratefips-v0
       - registry1.dso.mil/ironbank/tetrate/istio/pilot:1.23.2-tetratefips-v0
 
   - name: istio-controlplane
@@ -60,7 +60,7 @@ components:
     charts:
       - name: gateway
         url: https://istio-release.storage.googleapis.com/charts
-        version: 1.23.2
+        version: 1.23.3
         releaseName: admin-ingressgateway
         namespace: istio-admin-gateway
       - name: uds-istio-config
@@ -75,7 +75,7 @@ components:
     charts:
       - name: gateway
         url: https://istio-release.storage.googleapis.com/charts
-        version: 1.23.2
+        version: 1.23.3
         releaseName: tenant-ingressgateway
         namespace: istio-tenant-gateway
       - name: uds-istio-config
@@ -90,7 +90,7 @@ components:
     charts:
       - name: gateway
         url: https://istio-release.storage.googleapis.com/charts
-        version: 1.23.2
+        version: 1.23.3
         releaseName: passthrough-ingressgateway
         namespace: istio-passthrough-gateway
       - name: uds-istio-config