diff --git a/build.gradle b/build.gradle
index e8ed73fbad..f63a85489a 100644
--- a/build.gradle
+++ b/build.gradle
@@ -324,6 +324,10 @@ project(':cruise-control') {
     constraints {
       implementation("commons-beanutils:commons-beanutils:1.11.0") {
         because("version 1.9.4 pulled from kafa 3.9.1 has CVE-2025-48734 in it, which is fixed in 1.11.0")
+        }
+        
+      implementation('org.apache.commons:commons-lang3:3.18.0') {
+        because("3.18.0 addresses vulnerability CVE-2025-48924")
       }
     }