diff --git a/docs/changelog/124544.yaml b/docs/changelog/124544.yaml
new file mode 100644
index 0000000000000..216d5eacb0bd2
--- /dev/null
+++ b/docs/changelog/124544.yaml
@@ -0,0 +1,5 @@
+pr: 124544
+summary: Bump nimbus-jose-jwt to 10.0.2
+area: Security
+type: upgrade
+issues: []
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index b3e188e8ab530..155247aab1b6c 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -984,9 +984,9 @@
             <sha256 value="e8c1c594e2425bdbea2d860de55c69b69fc5d59454452449a0f0913c2a5b8a31" origin="Generated by Gradle"/>
          </artifact>
       </component>
-      <component group="com.nimbusds" name="nimbus-jose-jwt" version="10.0.1">
-         <artifact name="nimbus-jose-jwt-10.0.1.jar">
-            <sha256 value="f28dbd9ab128324f05050d76b78469d3a9cd83e0319aabc68d1c276e3923e13a" origin="Generated by Gradle"/>
+      <component group="com.nimbusds" name="nimbus-jose-jwt" version="10.0.2">
+         <artifact name="nimbus-jose-jwt-10.0.2.jar">
+            <sha256 value="960b978a6cd6cbc3319648adc73959789f6742a2bf1e8dd0c843dbc91624218a" origin="Generated by Gradle"/>
          </artifact>
       </component>
       <component group="com.nimbusds" name="nimbus-jose-jwt" version="4.41.1">
diff --git a/modules/repository-azure/build.gradle b/modules/repository-azure/build.gradle
index 025c494b0c761..032b4e9c56319 100644
--- a/modules/repository-azure/build.gradle
+++ b/modules/repository-azure/build.gradle
@@ -63,7 +63,7 @@ dependencies {
   api "com.github.stephenc.jcip:jcip-annotations:1.0-1"
   api "com.nimbusds:content-type:2.3"
   api "com.nimbusds:lang-tag:1.7"
-  api("com.nimbusds:nimbus-jose-jwt:10.0.1"){
+  api("com.nimbusds:nimbus-jose-jwt:10.0.2"){
     exclude group: 'com.google.crypto.tink', module: 'tink' // it's an optional dependency on which we don't rely
   }
   api("com.nimbusds:oauth2-oidc-sdk:11.22.2"){
diff --git a/x-pack/plugin/security/build.gradle b/x-pack/plugin/security/build.gradle
index eef4ca6d523d8..4f857655993aa 100644
--- a/x-pack/plugin/security/build.gradle
+++ b/x-pack/plugin/security/build.gradle
@@ -86,7 +86,7 @@ dependencies {
      * Eclipse can't pick up the shadow dependency so we point it at the unmodified version of the library
      * so it can compile things.
      */
-    api "com.nimbusds:nimbus-jose-jwt:10.0.1"
+    api "com.nimbusds:nimbus-jose-jwt:10.0.2"
   }
   api "com.nimbusds:lang-tag:1.7"
   api "com.sun.mail:jakarta.mail:1.6.3"
diff --git a/x-pack/plugin/security/lib/nimbus-jose-jwt-modified-part1/build.gradle b/x-pack/plugin/security/lib/nimbus-jose-jwt-modified-part1/build.gradle
index d7a32bca6e523..4855a9286a7eb 100644
--- a/x-pack/plugin/security/lib/nimbus-jose-jwt-modified-part1/build.gradle
+++ b/x-pack/plugin/security/lib/nimbus-jose-jwt-modified-part1/build.gradle
@@ -11,7 +11,7 @@ apply plugin: 'com.gradleup.shadow'
 // See the build.gradle file in the parent directory for an explanation of this unusual build
 
 dependencies {
-  implementation "com.nimbusds:nimbus-jose-jwt:10.0.1"
+  implementation "com.nimbusds:nimbus-jose-jwt:10.0.2"
 }
 
 tasks.named('shadowJar').configure {
diff --git a/x-pack/plugin/security/lib/nimbus-jose-jwt-modified/build.gradle b/x-pack/plugin/security/lib/nimbus-jose-jwt-modified/build.gradle
index f618f96706d63..d83788891845d 100644
--- a/x-pack/plugin/security/lib/nimbus-jose-jwt-modified/build.gradle
+++ b/x-pack/plugin/security/lib/nimbus-jose-jwt-modified/build.gradle
@@ -11,7 +11,7 @@ apply plugin: 'com.gradleup.shadow'
 // See the build.gradle file in the parent directory for an explanation of this unusual build
 
 dependencies {
-  implementation "com.nimbusds:nimbus-jose-jwt:10.0.1"
+  implementation "com.nimbusds:nimbus-jose-jwt:10.0.2"
   implementation project(path: xpackModule('security:lib:nimbus-jose-jwt-modified-part2'), configuration: 'shadow')
 }