diff --git a/Dockerfile b/Dockerfile
index 407591cb42450..33349642a03af 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -15,7 +15,7 @@
 # Builder image
 FROM rockylinux:9 as builder
 
-ENV GOLANG_VERSION 1.20.5
+ENV GOLANG_VERSION 1.20.7
 ENV ARCH amd64
 ENV GOLANG_DOWNLOAD_URL https://dl.google.com/go/go$GOLANG_VERSION.linux-$ARCH.tar.gz
 ENV GOPATH /go
diff --git a/Dockerfile.enterprise b/Dockerfile.enterprise
index 55b56bcff089e..357f5012fbe21 100644
--- a/Dockerfile.enterprise
+++ b/Dockerfile.enterprise
@@ -15,7 +15,7 @@
 # Builder image
 FROM rockylinux:9 as builder
 
-ENV GOLANG_VERSION 1.20.5
+ENV GOLANG_VERSION 1.20.7
 ENV ARCH amd64
 ENV GOLANG_DOWNLOAD_URL https://dl.google.com/go/go$GOLANG_VERSION.linux-$ARCH.tar.gz
 ENV GOPATH /go
diff --git a/WORKSPACE b/WORKSPACE
index 6b116f5e1f432..570fb1a2caf55 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -64,7 +64,7 @@ go_download_sdk(
         "https://mirrors.aliyun.com/golang/{}",
         "https://dl.google.com/go/{}",
     ],
-    version = "1.20.6",
+    version = "1.20.7",
 )
 
 go_register_toolchains(
diff --git a/build/image/base b/build/image/base
index 0e238244be95f..06799386eee84 100644
--- a/build/image/base
+++ b/build/image/base
@@ -17,9 +17,9 @@ FROM hub.pingcap.net/jenkins/centos7_jenkins
 USER root
 WORKDIR /root
 
-ENV GOLANG_VERSION 1.20.6
+ENV GOLANG_VERSION 1.20.7
 ENV GOLANG_DOWNLOAD_URL https://dl.google.com/go/go$GOLANG_VERSION.linux-amd64.tar.gz
-ENV GOLANG_DOWNLOAD_SHA256 b945ae2bb5db01a0fb4786afde64e6fbab50b67f6fa0eb6cfa4924f16a7ff1eb
+ENV GOLANG_DOWNLOAD_SHA256 f0a87f1bcae91c4b69f8dc2bc6d7e6bfcd7524fceec130af525058c0c17b1b44
 ENV GOPATH /go
 ENV GOROOT /usr/local/go
 ENV PATH $GOPATH/bin:$GOROOT/bin:$PATH