diff --git a/build/local/docker-compose-local.yml b/build/local/docker-compose-local.yml
index d7eaefc33d..9121eb6727 100644
--- a/build/local/docker-compose-local.yml
+++ b/build/local/docker-compose-local.yml
@@ -6,7 +6,7 @@ services:
     restart: always
     networks:
       - zitadel
-    image: cockroachdb/cockroach:v21.2.2
+    image: cockroachdb/cockroach:v21.2.3
     command: start-single-node --insecure --listen-addr=0.0.0.0
     ports:
       - 8080:8080
diff --git a/build/zitadel/Dockerfile b/build/zitadel/Dockerfile
index 22a68dda31..d87db0805e 100644
--- a/build/zitadel/Dockerfile
+++ b/build/zitadel/Dockerfile
@@ -60,9 +60,9 @@ RUN apt install openssl tzdata tar
 
 # cockroach binary used to backup database
 RUN mkdir /usr/local/lib/cockroach
-RUN wget -qO- https://binaries.cockroachdb.com/cockroach-v21.2.2.linux-amd64.tgz \
-    | tar  xvz && cp -i cockroach-v21.2.2.linux-amd64/cockroach /usr/local/bin/
-RUN rm -r cockroach-v21.2.2.linux-amd64
+RUN wget -qO- https://binaries.cockroachdb.com/cockroach-v21.2.3.linux-amd64.tgz \
+    | tar  xvz && cp -i cockroach-v21.2.3.linux-amd64/cockroach /usr/local/bin/
+RUN rm -r cockroach-v21.2.3.linux-amd64
 
 #######################
 ## generates static files
diff --git a/operator/common/images.go b/operator/common/images.go
index b16b94741e..c4afc337f1 100644
--- a/operator/common/images.go
+++ b/operator/common/images.go
@@ -9,7 +9,7 @@ type dockerhubImage image
 type zitadelImage image
 
 const (
-	CockroachImage       dockerhubImage = "cockroachdb/cockroach:v21.2.2"
+	CockroachImage       dockerhubImage = "cockroachdb/cockroach:v21.2.3"
 	PostgresImage        dockerhubImage = "postgres:9.6.17"
 	FlywayImage          dockerhubImage = "flyway/flyway:8.0.2"
 	AlpineImage          dockerhubImage = "alpine:3.11"