diff --git a/CHANGES.rst b/CHANGES.rst
index bc1c0670..81768852 100644
--- a/CHANGES.rst
+++ b/CHANGES.rst
@@ -5,6 +5,8 @@ Changelog
 Unreleased
 ----------
 
+* Bumped sql_exporter to ``0.22.2`` - ``GHSA-xmrv-pmrh-hhx2`` and ``CVE-2026-34986``
+
 2.59.0 (2026-03-17)
 -------------------
 
diff --git a/crate/operator/config.py b/crate/operator/config.py
index 4f5003db..9f9894d4 100644
--- a/crate/operator/config.py
+++ b/crate/operator/config.py
@@ -167,7 +167,7 @@ class Config:
     PROMETHEUS_PORT: int = 8080
 
     #: The sql_exporter image to use
-    SQL_EXPORTER_IMAGE: str = "burningalchemist/sql_exporter:0.20.0"
+    SQL_EXPORTER_IMAGE: str = "burningalchemist/sql_exporter:0.22.2"
 
     #: Name of the secret containing credentials to access the source
     #: backup when restoring a snapshot.