diff --git a/sdks/java/io/expansion-service/build.gradle b/sdks/java/io/expansion-service/build.gradle
index a0c2930c1ff9..28b4060a2b58 100644
--- a/sdks/java/io/expansion-service/build.gradle
+++ b/sdks/java/io/expansion-service/build.gradle
@@ -34,7 +34,7 @@ applyJavaNature(
 // take advantage of OAuth authentication with all providers.
 configurations.runtimeClasspath {
   // Pin kafka-clients version due to <3.4.0 missing auth callback classes.
-  resolutionStrategy.force 'org.apache.kafka:kafka-clients:3.9.0'
+  resolutionStrategy.force 'org.apache.kafka:kafka-clients:3.9.2'
   // force parquet-avro:1.15.2 to fix CVE-2025-46762
   resolutionStrategy.force 'org.apache.parquet:parquet-avro:1.15.2'