diff --git a/pipelines/controller/pom.xml b/pipelines/controller/pom.xml
index 50fde9374..75e272368 100644
--- a/pipelines/controller/pom.xml
+++ b/pipelines/controller/pom.xml
@@ -110,7 +110,7 @@
     <dependency>
       <groupId>org.apache.hive</groupId>
       <artifactId>hive-jdbc</artifactId>
-      <version>3.1.3</version>
+      <version>4.0.1</version>
       <!-- We cannot switch to newer versions yet as they are not stable, e.g.,
         4.0.0-beta-1 gives a NoClassDefFoundError on some Thrift classes;
         or 4.0.0-alpha-2 fails to connect to the thrift server.
@@ -138,7 +138,7 @@
            which has the CVE-2020-24750 vulnerability. Simple exclusion of this
            is not the "right" approach but is working for our use-case. A new
            release of `hive-jdbc` (which depends on `hive-*` libraries) can
-           resolve many of these issues as 3.1.3 is too old. -->
+           resolve many of these issues as 4.0.1 is too old. -->
         <exclusion>
           <groupId>org.apache.htrace</groupId>
           <artifactId>htrace-core</artifactId>