diff --git a/SPECS/thrift/thrift.signatures.json b/SPECS/thrift/thrift.signatures.json
index 30193859a43..e4e8da437ed 100644
--- a/SPECS/thrift/thrift.signatures.json
+++ b/SPECS/thrift/thrift.signatures.json
@@ -1,8 +1,7 @@
 {
-    "Signatures": {
-     "bootstrap.sh": "ad4d6eb9fcd1bdc068dd98966516a32db760223a2b9ec9527bc6ac50240d6de5",
-     "libthrift-0.15.0.pom": "18975af7be5790578a9570f5716fce49c769bff05fab8ad6829c768c2120208b",
-     "thrift-0.15.0.tar.gz": "d5883566d161f8f6ddd4e21f3a9e3e6b8272799d054820f1c25b11e86718f86b"
-    }
+  "Signatures": {
+    "bootstrap.sh": "ad4d6eb9fcd1bdc068dd98966516a32db760223a2b9ec9527bc6ac50240d6de5",
+    "libthrift-0.15.0.pom": "18975af7be5790578a9570f5716fce49c769bff05fab8ad6829c768c2120208b",
+    "thrift-0.23.0.tar.gz": "1859d932d2ae1f13d16c5a196931208c116310a5ff50f2bfd11d3db03be8f46f"
+  }
 }
-   
\ No newline at end of file
diff --git a/SPECS/thrift/thrift.spec b/SPECS/thrift/thrift.spec
index 262fcfe6082..3bd67c0d73d 100644
--- a/SPECS/thrift/thrift.spec
+++ b/SPECS/thrift/thrift.spec
@@ -65,8 +65,8 @@
 # change is a SONAME change and dependencies need to be rebuilt
 Summary: Software framework for cross-language services development
 Name:    thrift
-Version: 0.15.0
-Release: 5%{?dist}
+Version: 0.23.0
+Release: 1%{?dist}
 
 # Parts of the source are used under the BSD and zlib licenses, but
 # these are OK for inclusion in an Apache 2.0-licensed whole:
@@ -406,6 +406,9 @@ find %{buildroot} -name \*.py -exec grep -q /usr/bin/env {} \; -print | xargs -r
 %endif
  
 %changelog
+* Wed Apr 29 2026 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 0.23.0-1
+- Auto-upgrade to 0.23.0 - for CVE-2025-48431,CVE-2026-41602,CVE-2026-41603,CVE-2026-41604,CVE-2026-41605,CVE-2026-41606,CVE-2026-41607,CVE-2026-41636
+
 * Tue Mar 19 2024 Himaja Kesari <himajakesari@microsoft.com> - 0.15.0-5
 - Initial CBL-Mariner import from Fedora 40 (license: MIT).
 - License verified.
diff --git a/cgmanifest.json b/cgmanifest.json
index e686d04474f..63034074310 100644
--- a/cgmanifest.json
+++ b/cgmanifest.json
@@ -29186,8 +29186,8 @@
         "type": "other",
         "other": {
           "name": "thrift",
-          "version": "0.15.0",
-          "downloadUrl": "https://archive.apache.org/dist/thrift/0.15.0/thrift-0.15.0.tar.gz"
+          "version": "0.23.0",
+          "downloadUrl": "https://archive.apache.org/dist/thrift/0.23.0/thrift-0.23.0.tar.gz"
         }
       }
     },