diff --git a/README.md b/README.md
index fd8330b37..31b8f0dd2 100644
--- a/README.md
+++ b/README.md
@@ -118,7 +118,7 @@ Note:
 - Network Plugin
   - [cni-plugins](https://github.com/containernetworking/plugins) 1.9.1
   - [calico](https://github.com/projectcalico/calico) 3.31.7
-  - [cilium](https://github.com/cilium/cilium) 1.20.3
+  - [cilium](https://github.com/cilium/cilium) 1.20.4
   - [flannel](https://github.com/flannel-io/flannel) 0.28.10
   - [kube-ovn](https://github.com/alauda/kube-ovn) 1.12.21
   - [kube-router](https://github.com/cloudnativelabs/kube-router) 2.1.1
diff --git a/docs/CNI/cilium.md b/docs/CNI/cilium.md
index 9f1b5b092..8724373b9 100644
--- a/docs/CNI/cilium.md
+++ b/docs/CNI/cilium.md
@@ -249,7 +249,7 @@ cilium_operator_extra_volume_mounts:
 ## Choose Cilium version
 
 ```yml
-cilium_version: "1.20.3"
+cilium_version: "1.20.4"
 ```
 
 ## Add variable to config
diff --git a/roles/kubespray_defaults/defaults/main/download.yml b/roles/kubespray_defaults/defaults/main/download.yml
index 1cfdffa96..dfa2675e9 100644
--- a/roles/kubespray_defaults/defaults/main/download.yml
+++ b/roles/kubespray_defaults/defaults/main/download.yml
@@ -115,7 +115,7 @@ flannel_version: 0.28.10
 flannel_cni_version: 1.7.1-flannel1
 cni_version: "{{ (cni_binary_checksums['amd64'] | dict2items)[0].key }}"
 
-cilium_version: "1.20.3"
+cilium_version: "1.20.4"
 cilium_cli_version: "{{ (ciliumcli_binary_checksums['amd64'] | dict2items)[0].key }}"
 cilium_enable_hubble: false
 
@@ -234,13 +234,13 @@ cilium_operator_image_tag: "v{{ cilium_version }}"
 cilium_hubble_relay_image_repo: "{{ quay_image_repo }}/cilium/hubble-relay"
 cilium_hubble_relay_image_tag: "v{{ cilium_version }}"
 cilium_certgen_image_repo: "{{ quay_image_repo }}/cilium/certgen"
-cilium_certgen_image_tag: "v0.4.11"
+cilium_certgen_image_tag: "v0.4.13"
 cilium_hubble_ui_image_repo: "{{ quay_image_repo }}/cilium/hubble-ui"
 cilium_hubble_ui_image_tag: "v0.13.6"
 cilium_hubble_ui_backend_image_repo: "{{ quay_image_repo }}/cilium/hubble-ui-backend"
 cilium_hubble_ui_backend_image_tag: "v0.13.6"
 cilium_envoy_image_repo: "{{ quay_image_repo }}/cilium/cilium-envoy"
-cilium_envoy_image_tag: "v1.38.6-1791537840-00e749f11f69334c625e53fc1ce2fc6c7f34a51f"
+cilium_envoy_image_tag: "v1.39.5-1792733054-8c73b2816bc8239e27f1fd53b271884688137459"
 kube_ovn_container_image_repo: "{{ docker_image_repo }}/kubeovn/kube-ovn"
 kube_ovn_container_image_tag: "v{{ kube_ovn_version }}"
 kube_ovn_vpc_container_image_repo: "{{ docker_image_repo }}/kubeovn/vpc-nat-gateway"