diff --git a/CHANGELOG.md b/CHANGELOG.md
index e9ece6114e..361be69ab3 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,7 +4,7 @@ See the [releases page](https://github.com/github/codeql-action/releases) for th
 
 ## [UNRELEASED]
 
-No user facing changes.
+- Update default CodeQL bundle version to 2.23.9. [#3393](https://github.com/github/codeql-action/pull/3393)
 
 ## 4.31.9 - 16 Dec 2025
 
diff --git a/lib/analyze-action.js b/lib/analyze-action.js
index 5dc7d66d36..d5dba40f4d 100644
--- a/lib/analyze-action.js
+++ b/lib/analyze-action.js
@@ -94074,8 +94074,8 @@ var path5 = __toESM(require("path"));
 var semver5 = __toESM(require_semver2());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.23.8";
-var cliVersion = "2.23.8";
+var bundleVersion = "codeql-bundle-v2.23.9";
+var cliVersion = "2.23.9";
 
 // src/overlay-database-utils.ts
 var fs3 = __toESM(require("fs"));
diff --git a/lib/autobuild-action.js b/lib/autobuild-action.js
index 5ade8c327b..f66c78d4ce 100644
--- a/lib/autobuild-action.js
+++ b/lib/autobuild-action.js
@@ -90595,8 +90595,8 @@ var path3 = __toESM(require("path"));
 var semver5 = __toESM(require_semver2());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.23.8";
-var cliVersion = "2.23.8";
+var bundleVersion = "codeql-bundle-v2.23.9";
+var cliVersion = "2.23.9";
 
 // src/overlay-database-utils.ts
 var fs2 = __toESM(require("fs"));
diff --git a/lib/defaults.json b/lib/defaults.json
index 6f3dc42bf8..8c5ef57bf1 100644
--- a/lib/defaults.json
+++ b/lib/defaults.json
@@ -1,6 +1,6 @@
 {
-  "bundleVersion": "codeql-bundle-v2.23.8",
-  "cliVersion": "2.23.8",
-  "priorBundleVersion": "codeql-bundle-v2.23.7",
-  "priorCliVersion": "2.23.7"
+  "bundleVersion": "codeql-bundle-v2.23.9",
+  "cliVersion": "2.23.9",
+  "priorBundleVersion": "codeql-bundle-v2.23.8",
+  "priorCliVersion": "2.23.8"
 }
diff --git a/lib/init-action-post.js b/lib/init-action-post.js
index f7c5f6aad9..767cb0865f 100644
--- a/lib/init-action-post.js
+++ b/lib/init-action-post.js
@@ -130077,8 +130077,8 @@ var path4 = __toESM(require("path"));
 var semver5 = __toESM(require_semver2());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.23.8";
-var cliVersion = "2.23.8";
+var bundleVersion = "codeql-bundle-v2.23.9";
+var cliVersion = "2.23.9";
 
 // src/overlay-database-utils.ts
 var fs3 = __toESM(require("fs"));
diff --git a/lib/init-action.js b/lib/init-action.js
index 7699daf42a..785d566e56 100644
--- a/lib/init-action.js
+++ b/lib/init-action.js
@@ -91535,8 +91535,8 @@ var path6 = __toESM(require("path"));
 var semver5 = __toESM(require_semver2());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.23.8";
-var cliVersion = "2.23.8";
+var bundleVersion = "codeql-bundle-v2.23.9";
+var cliVersion = "2.23.9";
 
 // src/overlay-database-utils.ts
 var fs3 = __toESM(require("fs"));
diff --git a/lib/setup-codeql-action.js b/lib/setup-codeql-action.js
index 2eb5f24468..f2de7dd3b6 100644
--- a/lib/setup-codeql-action.js
+++ b/lib/setup-codeql-action.js
@@ -90469,8 +90469,8 @@ var path4 = __toESM(require("path"));
 var semver4 = __toESM(require_semver2());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.23.8";
-var cliVersion = "2.23.8";
+var bundleVersion = "codeql-bundle-v2.23.9";
+var cliVersion = "2.23.9";
 
 // src/overlay-database-utils.ts
 var fs3 = __toESM(require("fs"));
diff --git a/lib/start-proxy-action.js b/lib/start-proxy-action.js
index d5538a5eb1..f0b5ab0ad9 100644
--- a/lib/start-proxy-action.js
+++ b/lib/start-proxy-action.js
@@ -107364,8 +107364,8 @@ function getActionsLogger() {
 var core7 = __toESM(require_core());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.23.8";
-var cliVersion = "2.23.8";
+var bundleVersion = "codeql-bundle-v2.23.9";
+var cliVersion = "2.23.9";
 
 // src/languages.ts
 var KnownLanguage = /* @__PURE__ */ ((KnownLanguage2) => {
diff --git a/lib/upload-lib.js b/lib/upload-lib.js
index 5f0950af29..def4bc215d 100644
--- a/lib/upload-lib.js
+++ b/lib/upload-lib.js
@@ -93618,8 +93618,8 @@ var path4 = __toESM(require("path"));
 var semver5 = __toESM(require_semver2());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.23.8";
-var cliVersion = "2.23.8";
+var bundleVersion = "codeql-bundle-v2.23.9";
+var cliVersion = "2.23.9";
 
 // src/overlay-database-utils.ts
 var fs3 = __toESM(require("fs"));
diff --git a/lib/upload-sarif-action.js b/lib/upload-sarif-action.js
index 90e5509020..920cfb823c 100644
--- a/lib/upload-sarif-action.js
+++ b/lib/upload-sarif-action.js
@@ -93385,8 +93385,8 @@ var path4 = __toESM(require("path"));
 var semver4 = __toESM(require_semver2());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.23.8";
-var cliVersion = "2.23.8";
+var bundleVersion = "codeql-bundle-v2.23.9";
+var cliVersion = "2.23.9";
 
 // src/overlay-database-utils.ts
 var fs3 = __toESM(require("fs"));
diff --git a/src/defaults.json b/src/defaults.json
index 6f3dc42bf8..8c5ef57bf1 100644
--- a/src/defaults.json
+++ b/src/defaults.json
@@ -1,6 +1,6 @@
 {
-  "bundleVersion": "codeql-bundle-v2.23.8",
-  "cliVersion": "2.23.8",
-  "priorBundleVersion": "codeql-bundle-v2.23.7",
-  "priorCliVersion": "2.23.7"
+  "bundleVersion": "codeql-bundle-v2.23.9",
+  "cliVersion": "2.23.9",
+  "priorBundleVersion": "codeql-bundle-v2.23.8",
+  "priorCliVersion": "2.23.8"
 }