diff --git a/build/local/docker-compose-local.yml b/build/local/docker-compose-local.yml
index 0846b228d..5d82220bb 100644
--- a/build/local/docker-compose-local.yml
+++ b/build/local/docker-compose-local.yml
@@ -6,7 +6,7 @@ services:
     restart: always
     networks:
       - zitadel
-    image: cockroachdb/cockroach:v21.2.3
+    image: cockroachdb/cockroach:v21.2.4
     command: start-single-node --insecure --listen-addr=0.0.0.0
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:8080/health?ready=1"]
diff --git a/build/zitadel/Dockerfile b/build/zitadel/Dockerfile
index d87db0805..faaf7937e 100644
--- a/build/zitadel/Dockerfile
+++ b/build/zitadel/Dockerfile
@@ -60,9 +60,9 @@ RUN apt install openssl tzdata tar
 
 # cockroach binary used to backup database
 RUN mkdir /usr/local/lib/cockroach
-RUN wget -qO- https://binaries.cockroachdb.com/cockroach-v21.2.3.linux-amd64.tgz \
-    | tar  xvz && cp -i cockroach-v21.2.3.linux-amd64/cockroach /usr/local/bin/
-RUN rm -r cockroach-v21.2.3.linux-amd64
+RUN wget -qO- https://binaries.cockroachdb.com/cockroach-v21.2.4.linux-amd64.tgz \
+    | tar  xvz && cp -i cockroach-v21.2.4.linux-amd64/cockroach /usr/local/bin/
+RUN rm -r cockroach-v21.2.4.linux-amd64
 
 #######################
 ## generates static files
diff --git a/operator/common/images.go b/operator/common/images.go
index c4afc337f..eb05be73c 100644
--- a/operator/common/images.go
+++ b/operator/common/images.go
@@ -9,7 +9,7 @@ type dockerhubImage image
 type zitadelImage image
 
 const (
-	CockroachImage       dockerhubImage = "cockroachdb/cockroach:v21.2.3"
+	CockroachImage       dockerhubImage = "cockroachdb/cockroach:v21.2.4"
 	PostgresImage        dockerhubImage = "postgres:9.6.17"
 	FlywayImage          dockerhubImage = "flyway/flyway:8.0.2"
 	AlpineImage          dockerhubImage = "alpine:3.11"