diff --git a/pkg/apis/istio/v1beta1/defaults.go b/pkg/apis/istio/v1beta1/defaults.go
index 070c7b91a..52640a781 100644
--- a/pkg/apis/istio/v1beta1/defaults.go
+++ b/pkg/apis/istio/v1beta1/defaults.go
@@ -69,7 +69,7 @@ const (
 	defaultEnvoyAccessLogEncoding          = "TEXT"
 	defaultClusterName                     = "Kubernetes"
 	defaultNetworkName                     = "local-network"
-	defaultVaultEnvImage                   = "ghcr.io/banzaicloud/vault-env:1.9.0"
+	defaultVaultEnvImage                   = "ghcr.io/banzaicloud/vault-env:1.11.1"
 	defaultVaultAddress                    = "https://vault.vault:8200"
 	defaultVaultRole                       = "istiod"
 	defaultVaultCACertPath                 = "vault:secret/data/pki/istiod#certificate"