diff --git a/kubernetes/apps/self-hosted/paperless/app/helmrelease.yaml b/kubernetes/apps/self-hosted/paperless/app/helmrelease.yaml
index ae7c4bf06..b500cd857 100644
--- a/kubernetes/apps/self-hosted/paperless/app/helmrelease.yaml
+++ b/kubernetes/apps/self-hosted/paperless/app/helmrelease.yaml
@@ -18,7 +18,7 @@ spec:
           app:
             image:
               repository: ghcr.io/paperless-ngx/paperless-ngx
-              tag: 2.20.8@sha256:e231ec11a1907bfdf172b4f120b4ef1994feb71e6cc624e8b88c53e2da3dfb62
+              tag: 2.20.9@sha256:1d99ede700ffdf7aa44899b5fee29c8c279f175769b6cb295e91e9f15772728e
             env:
               EMPTY_TRASH_DELAY: 0 1 * * *
               PAPERLESS_APPS: allauth.socialaccount.providers.openid_connect