diff --git a/CHANGELOG.md b/CHANGELOG.md
index d19ecc7efa..284c7206ef 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,7 @@ See the [releases page](https://github.com/github/codeql-action/releases) for th
 
 ## [UNRELEASED]
 
+- Update default CodeQL bundle version to 2.23.3. [#3205](https://github.com/github/codeql-action/pull/3205)
 - Experimental: A new `setup-codeql` action has been added which is similar to `init`, except it only installs the CodeQL CLI and does not initialize a database. Do not use this in production as it is part of an internal experiment and subject to change at any time. [#3204](https://github.com/github/codeql-action/pull/3204)
 
 ## 4.30.8 - 10 Oct 2025
diff --git a/lib/analyze-action.js b/lib/analyze-action.js
index 43f4e704ba..f1fa5d5b96 100644
--- a/lib/analyze-action.js
+++ b/lib/analyze-action.js
@@ -90704,8 +90704,8 @@ var path8 = __toESM(require("path"));
 var semver4 = __toESM(require_semver2());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.23.2";
-var cliVersion = "2.23.2";
+var bundleVersion = "codeql-bundle-v2.23.3";
+var cliVersion = "2.23.3";
 
 // src/overlay-database-utils.ts
 var crypto = __toESM(require("crypto"));
diff --git a/lib/autobuild-action.js b/lib/autobuild-action.js
index 06e298736c..644574bec9 100644
--- a/lib/autobuild-action.js
+++ b/lib/autobuild-action.js
@@ -78318,8 +78318,8 @@ var path3 = __toESM(require("path"));
 var semver4 = __toESM(require_semver2());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.23.2";
-var cliVersion = "2.23.2";
+var bundleVersion = "codeql-bundle-v2.23.3";
+var cliVersion = "2.23.3";
 
 // src/overlay-database-utils.ts
 var fs2 = __toESM(require("fs"));
diff --git a/lib/defaults.json b/lib/defaults.json
index 3c4a3ddbef..1fa392f548 100644
--- a/lib/defaults.json
+++ b/lib/defaults.json
@@ -1,6 +1,6 @@
 {
-  "bundleVersion": "codeql-bundle-v2.23.2",
-  "cliVersion": "2.23.2",
-  "priorBundleVersion": "codeql-bundle-v2.23.1",
-  "priorCliVersion": "2.23.1"
+  "bundleVersion": "codeql-bundle-v2.23.3",
+  "cliVersion": "2.23.3",
+  "priorBundleVersion": "codeql-bundle-v2.23.2",
+  "priorCliVersion": "2.23.2"
 }
diff --git a/lib/init-action-post.js b/lib/init-action-post.js
index ebb33f2cb9..f5008f7a8c 100644
--- a/lib/init-action-post.js
+++ b/lib/init-action-post.js
@@ -128949,8 +128949,8 @@ var path8 = __toESM(require("path"));
 var semver4 = __toESM(require_semver2());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.23.2";
-var cliVersion = "2.23.2";
+var bundleVersion = "codeql-bundle-v2.23.3";
+var cliVersion = "2.23.3";
 
 // src/overlay-database-utils.ts
 var fs6 = __toESM(require("fs"));
diff --git a/lib/init-action.js b/lib/init-action.js
index a07463f14a..fdbba7c1dc 100644
--- a/lib/init-action.js
+++ b/lib/init-action.js
@@ -86589,8 +86589,8 @@ var path9 = __toESM(require("path"));
 var semver4 = __toESM(require_semver2());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.23.2";
-var cliVersion = "2.23.2";
+var bundleVersion = "codeql-bundle-v2.23.3";
+var cliVersion = "2.23.3";
 
 // src/overlay-database-utils.ts
 var crypto = __toESM(require("crypto"));
diff --git a/lib/setup-codeql-action.js b/lib/setup-codeql-action.js
index a93c6f15a7..046e384d4c 100644
--- a/lib/setup-codeql-action.js
+++ b/lib/setup-codeql-action.js
@@ -84758,8 +84758,8 @@ var path8 = __toESM(require("path"));
 var semver3 = __toESM(require_semver2());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.23.2";
-var cliVersion = "2.23.2";
+var bundleVersion = "codeql-bundle-v2.23.3";
+var cliVersion = "2.23.3";
 
 // src/overlay-database-utils.ts
 var fs5 = __toESM(require("fs"));
diff --git a/lib/start-proxy-action.js b/lib/start-proxy-action.js
index 7815851ee8..edf4163f98 100644
--- a/lib/start-proxy-action.js
+++ b/lib/start-proxy-action.js
@@ -95060,8 +95060,8 @@ function getActionsLogger() {
 var core7 = __toESM(require_core());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.23.2";
-var cliVersion = "2.23.2";
+var bundleVersion = "codeql-bundle-v2.23.3";
+var cliVersion = "2.23.3";
 
 // src/languages.ts
 var KnownLanguage = /* @__PURE__ */ ((KnownLanguage2) => {
diff --git a/lib/upload-lib.js b/lib/upload-lib.js
index a3c6a39532..35b5b00fc0 100644
--- a/lib/upload-lib.js
+++ b/lib/upload-lib.js
@@ -89065,8 +89065,8 @@ var path8 = __toESM(require("path"));
 var semver4 = __toESM(require_semver2());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.23.2";
-var cliVersion = "2.23.2";
+var bundleVersion = "codeql-bundle-v2.23.3";
+var cliVersion = "2.23.3";
 
 // src/overlay-database-utils.ts
 var fs5 = __toESM(require("fs"));
diff --git a/lib/upload-sarif-action.js b/lib/upload-sarif-action.js
index ec452b2ec0..3046a92c8b 100644
--- a/lib/upload-sarif-action.js
+++ b/lib/upload-sarif-action.js
@@ -88976,8 +88976,8 @@ var path8 = __toESM(require("path"));
 var semver3 = __toESM(require_semver2());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.23.2";
-var cliVersion = "2.23.2";
+var bundleVersion = "codeql-bundle-v2.23.3";
+var cliVersion = "2.23.3";
 
 // src/overlay-database-utils.ts
 var fs5 = __toESM(require("fs"));
diff --git a/src/defaults.json b/src/defaults.json
index 3c4a3ddbef..1fa392f548 100644
--- a/src/defaults.json
+++ b/src/defaults.json
@@ -1,6 +1,6 @@
 {
-  "bundleVersion": "codeql-bundle-v2.23.2",
-  "cliVersion": "2.23.2",
-  "priorBundleVersion": "codeql-bundle-v2.23.1",
-  "priorCliVersion": "2.23.1"
+  "bundleVersion": "codeql-bundle-v2.23.3",
+  "cliVersion": "2.23.3",
+  "priorBundleVersion": "codeql-bundle-v2.23.2",
+  "priorCliVersion": "2.23.2"
 }