diff --git a/CHANGELOG.md b/CHANGELOG.md
index e305995c25..e9c101e1a5 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,7 +4,7 @@ See the [releases page](https://github.com/github/codeql-action/releases) for th
 
 ## [UNRELEASED]
 
-No user facing changes.
+- Update default CodeQL bundle version to 2.23.7. [#3343](https://github.com/github/codeql-action/pull/3343)
 
 ## 4.31.6 - 01 Dec 2025
 
diff --git a/lib/analyze-action.js b/lib/analyze-action.js
index 129b7b56fa..95d689b058 100644
--- a/lib/analyze-action.js
+++ b/lib/analyze-action.js
@@ -88211,8 +88211,8 @@ var path4 = __toESM(require("path"));
 var semver4 = __toESM(require_semver2());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.23.6";
-var cliVersion = "2.23.6";
+var bundleVersion = "codeql-bundle-v2.23.7";
+var cliVersion = "2.23.7";
 
 // src/overlay-database-utils.ts
 var fs3 = __toESM(require("fs"));
diff --git a/lib/autobuild-action.js b/lib/autobuild-action.js
index 7f856290fe..58ebe893fe 100644
--- a/lib/autobuild-action.js
+++ b/lib/autobuild-action.js
@@ -83701,8 +83701,8 @@ var path3 = __toESM(require("path"));
 var semver4 = __toESM(require_semver2());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.23.6";
-var cliVersion = "2.23.6";
+var bundleVersion = "codeql-bundle-v2.23.7";
+var cliVersion = "2.23.7";
 
 // src/overlay-database-utils.ts
 var fs2 = __toESM(require("fs"));
diff --git a/lib/defaults.json b/lib/defaults.json
index 835b6a33b4..04929fab3e 100644
--- a/lib/defaults.json
+++ b/lib/defaults.json
@@ -1,6 +1,6 @@
 {
-  "bundleVersion": "codeql-bundle-v2.23.6",
-  "cliVersion": "2.23.6",
-  "priorBundleVersion": "codeql-bundle-v2.23.5",
-  "priorCliVersion": "2.23.5"
+  "bundleVersion": "codeql-bundle-v2.23.7",
+  "cliVersion": "2.23.7",
+  "priorBundleVersion": "codeql-bundle-v2.23.6",
+  "priorCliVersion": "2.23.6"
 }
diff --git a/lib/init-action-post.js b/lib/init-action-post.js
index 88c0ecbc7b..1dc7861144 100644
--- a/lib/init-action-post.js
+++ b/lib/init-action-post.js
@@ -123084,8 +123084,8 @@ var path4 = __toESM(require("path"));
 var semver4 = __toESM(require_semver2());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.23.6";
-var cliVersion = "2.23.6";
+var bundleVersion = "codeql-bundle-v2.23.7";
+var cliVersion = "2.23.7";
 
 // src/overlay-database-utils.ts
 var fs3 = __toESM(require("fs"));
diff --git a/lib/init-action.js b/lib/init-action.js
index fa23150d9e..94cb71839a 100644
--- a/lib/init-action.js
+++ b/lib/init-action.js
@@ -85635,8 +85635,8 @@ var path5 = __toESM(require("path"));
 var semver4 = __toESM(require_semver2());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.23.6";
-var cliVersion = "2.23.6";
+var bundleVersion = "codeql-bundle-v2.23.7";
+var cliVersion = "2.23.7";
 
 // src/overlay-database-utils.ts
 var fs3 = __toESM(require("fs"));
diff --git a/lib/setup-codeql-action.js b/lib/setup-codeql-action.js
index e8c5332995..757a371df9 100644
--- a/lib/setup-codeql-action.js
+++ b/lib/setup-codeql-action.js
@@ -83589,8 +83589,8 @@ var path4 = __toESM(require("path"));
 var semver3 = __toESM(require_semver2());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.23.6";
-var cliVersion = "2.23.6";
+var bundleVersion = "codeql-bundle-v2.23.7";
+var cliVersion = "2.23.7";
 
 // src/overlay-database-utils.ts
 var fs3 = __toESM(require("fs"));
diff --git a/lib/start-proxy-action.js b/lib/start-proxy-action.js
index 4c3262559f..7d282a3d29 100644
--- a/lib/start-proxy-action.js
+++ b/lib/start-proxy-action.js
@@ -99720,8 +99720,8 @@ function getActionsLogger() {
 var core7 = __toESM(require_core());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.23.6";
-var cliVersion = "2.23.6";
+var bundleVersion = "codeql-bundle-v2.23.7";
+var cliVersion = "2.23.7";
 
 // src/languages.ts
 var KnownLanguage = /* @__PURE__ */ ((KnownLanguage2) => {
diff --git a/lib/upload-lib.js b/lib/upload-lib.js
index 1fc9f8f082..421bf23ebc 100644
--- a/lib/upload-lib.js
+++ b/lib/upload-lib.js
@@ -86724,8 +86724,8 @@ var path4 = __toESM(require("path"));
 var semver4 = __toESM(require_semver2());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.23.6";
-var cliVersion = "2.23.6";
+var bundleVersion = "codeql-bundle-v2.23.7";
+var cliVersion = "2.23.7";
 
 // src/overlay-database-utils.ts
 var fs3 = __toESM(require("fs"));
diff --git a/lib/upload-sarif-action.js b/lib/upload-sarif-action.js
index 3bdcaf23e9..d0f6b08e23 100644
--- a/lib/upload-sarif-action.js
+++ b/lib/upload-sarif-action.js
@@ -86505,8 +86505,8 @@ var path4 = __toESM(require("path"));
 var semver3 = __toESM(require_semver2());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.23.6";
-var cliVersion = "2.23.6";
+var bundleVersion = "codeql-bundle-v2.23.7";
+var cliVersion = "2.23.7";
 
 // src/overlay-database-utils.ts
 var fs3 = __toESM(require("fs"));
diff --git a/src/defaults.json b/src/defaults.json
index 835b6a33b4..04929fab3e 100644
--- a/src/defaults.json
+++ b/src/defaults.json
@@ -1,6 +1,6 @@
 {
-  "bundleVersion": "codeql-bundle-v2.23.6",
-  "cliVersion": "2.23.6",
-  "priorBundleVersion": "codeql-bundle-v2.23.5",
-  "priorCliVersion": "2.23.5"
+  "bundleVersion": "codeql-bundle-v2.23.7",
+  "cliVersion": "2.23.7",
+  "priorBundleVersion": "codeql-bundle-v2.23.6",
+  "priorCliVersion": "2.23.6"
 }