diff --git a/CHANGELOG.md b/CHANGELOG.md
index 32c47e60..fb39576d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -21,11 +21,13 @@ All notable changes to this project will be documented in this file.
   - `node.driver` values have been moved to `secretOperator`.
   - `securityContext` values have been moved to `secretOperator.securityContext`.
 - Bump csi-node-driver-registrar to `v2.15.0` ([#642]).
+- Bump csi-provisioner to `v5.3.0` ([#643]).
 
 [#597]: https://github.com/stackabletech/secret-operator/pull/597
 [#636]: https://github.com/stackabletech/secret-operator/pull/636
 [#641]: https://github.com/stackabletech/secret-operator/pull/641
 [#642]: https://github.com/stackabletech/secret-operator/pull/642
+[#643]: https://github.com/stackabletech/secret-operator/pull/643
 
 ## [25.7.0] - 2025-07-23
 
diff --git a/deploy/helm/secret-operator/values.yaml b/deploy/helm/secret-operator/values.yaml
index 3ce9e034..d90e7371 100644
--- a/deploy/helm/secret-operator/values.yaml
+++ b/deploy/helm/secret-operator/values.yaml
@@ -6,7 +6,7 @@ image:
 externalProvisioner:
   image:
     repository: oci.stackable.tech/sdp/sig-storage/csi-provisioner
-    tag: v5.2.0
+    tag: v5.3.0
     pullPolicy: IfNotPresent
   resources:
     requests: