diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7f4a477c2e7aa..18563d9bced97 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -103,7 +103,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 - Bump `com.netflix.nebula.ospackage-base` from 11.0.0 to 11.3.0
 - Bump `gradle.plugin.com.github.johnrengelman:shadow` from 7.1.2 to 8.0.0
 - Bump `jna` from 5.11.0 to 5.13.0
-- Bump `commons-io:commons-io` from 2.7 to 2.12.0 (#7661)
+- Bump `commons-io:commons-io` from 2.7 to 2.12.0 (#7661, #7658)
 - Bump `org.apache.shiro:shiro-core` from 1.9.1 to 1.11.0 ([#7397](https://github.com/opensearch-project/OpenSearch/pull/7397))
 - Bump `jetty-server` in hdfs-fixture from 9.4.49.v20220914 to 9.4.51.v20230217 ([#7405](https://github.com/opensearch-project/OpenSearch/pull/7405))
 - OpenJDK Update (April 2023 Patch releases) ([#7448](https://github.com/opensearch-project/OpenSearch/pull/7448)
diff --git a/plugins/repository-hdfs/build.gradle b/plugins/repository-hdfs/build.gradle
index e2f95fec52d43..f106061f8b91c 100644
--- a/plugins/repository-hdfs/build.gradle
+++ b/plugins/repository-hdfs/build.gradle
@@ -75,7 +75,7 @@ dependencies {
   api 'commons-collections:commons-collections:3.2.2'
   api 'org.apache.commons:commons-compress:1.23.0'
   api 'org.apache.commons:commons-configuration2:2.9.0'
-  api 'commons-io:commons-io:2.11.0'
+  api 'commons-io:commons-io:2.12.0'
   api 'org.apache.commons:commons-lang3:3.12.0'
   implementation 'com.google.re2j:re2j:1.7'
   api 'javax.servlet:servlet-api:2.5'
diff --git a/plugins/repository-hdfs/licenses/commons-io-2.11.0.jar.sha1 b/plugins/repository-hdfs/licenses/commons-io-2.11.0.jar.sha1
deleted file mode 100644
index 8adec30bade49..0000000000000
--- a/plugins/repository-hdfs/licenses/commons-io-2.11.0.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-a2503f302b11ebde7ebc3df41daebe0e4eea3689
\ No newline at end of file
diff --git a/plugins/repository-hdfs/licenses/commons-io-2.12.0.jar.sha1 b/plugins/repository-hdfs/licenses/commons-io-2.12.0.jar.sha1
new file mode 100644
index 0000000000000..5225b130fb817
--- /dev/null
+++ b/plugins/repository-hdfs/licenses/commons-io-2.12.0.jar.sha1
@@ -0,0 +1 @@
+e5e3eb2ff05b494287f51476bc715161412c525f
\ No newline at end of file