diff --git a/CHANGELOG.md b/CHANGELOG.md
index 11772b7b79ef7..17a5c2b538bc8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -105,6 +105,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 ### Added
 
 ### Dependencies
+- Bump `org.apache.commons:commons-configuration2` from 2.10.0 to 2.10.1 ([#12896](https://github.com/opensearch-project/OpenSearch/pull/12896))
 - Bump `asm` from 9.6 to 9.7 ([#12908](https://github.com/opensearch-project/OpenSearch/pull/12908))
 
 ### Changed
diff --git a/plugins/repository-hdfs/build.gradle b/plugins/repository-hdfs/build.gradle
index c1f94320f2681..af07fa9e5d80b 100644
--- a/plugins/repository-hdfs/build.gradle
+++ b/plugins/repository-hdfs/build.gradle
@@ -74,7 +74,7 @@ dependencies {
   api "commons-codec:commons-codec:${versions.commonscodec}"
   api 'commons-collections:commons-collections:3.2.2'
   api "org.apache.commons:commons-compress:${versions.commonscompress}"
-  api 'org.apache.commons:commons-configuration2:2.10.0'
+  api 'org.apache.commons:commons-configuration2:2.10.1'
   api 'commons-io:commons-io:2.15.1'
   api 'org.apache.commons:commons-lang3:3.14.0'
   implementation 'com.google.re2j:re2j:1.7'
diff --git a/plugins/repository-hdfs/licenses/commons-configuration2-2.10.0.jar.sha1 b/plugins/repository-hdfs/licenses/commons-configuration2-2.10.0.jar.sha1
deleted file mode 100644
index 17d1b64781e5b..0000000000000
--- a/plugins/repository-hdfs/licenses/commons-configuration2-2.10.0.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-2b93eff3c83e5372262ed4996b609336305a810f
\ No newline at end of file
diff --git a/plugins/repository-hdfs/licenses/commons-configuration2-2.10.1.jar.sha1 b/plugins/repository-hdfs/licenses/commons-configuration2-2.10.1.jar.sha1
new file mode 100644
index 0000000000000..d4c0f8417d357
--- /dev/null
+++ b/plugins/repository-hdfs/licenses/commons-configuration2-2.10.1.jar.sha1
@@ -0,0 +1 @@
+2b681b3bcddeaa5bf5c2a2939cd77e2f9ad6efda
\ No newline at end of file