diff --git a/apps/admission-webhook-k8s/admission-webhook.yaml b/apps/admission-webhook-k8s/admission-webhook.yaml
index 785b279137a7..2c6618f099f1 100644
--- a/apps/admission-webhook-k8s/admission-webhook.yaml
+++ b/apps/admission-webhook-k8s/admission-webhook.yaml
@@ -40,7 +40,7 @@ spec:
             - name: NSM_ANNOTATION
               value: networkservicemesh.io
             - name: NSM_CONTAINER_IMAGES
-              value: ghcr.io/networkservicemesh/ci/cmd-nsc:94192e1
+              value: ghcr.io/networkservicemesh/ci/cmd-nsc:dd4b4f1
             - name: NSM_INIT_CONTAINER_IMAGES
               value: ghcr.io/networkservicemesh/ci/cmd-nsc-init:9162871
             - name: NSM_LABELS
diff --git a/apps/nsc-kernel/nsc.yaml b/apps/nsc-kernel/nsc.yaml
index 183815c6d3c7..70d0ffecd0e2 100644
--- a/apps/nsc-kernel/nsc.yaml
+++ b/apps/nsc-kernel/nsc.yaml
@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
         - name: nsc
-          image: ghcr.io/networkservicemesh/ci/cmd-nsc:94192e1
+          image: ghcr.io/networkservicemesh/ci/cmd-nsc:dd4b4f1
           imagePullPolicy: IfNotPresent
           env:
             - name: SPIFFE_ENDPOINT_SOCKET
diff --git a/apps/nsc-vfio/nsc.yaml b/apps/nsc-vfio/nsc.yaml
index b964bafec176..2d17329191e0 100644
--- a/apps/nsc-vfio/nsc.yaml
+++ b/apps/nsc-vfio/nsc.yaml
@@ -26,7 +26,7 @@ spec:
               mountPath: /dev/vfio
 
         - name: sidecar
-          image: ghcr.io/networkservicemesh/ci/cmd-nsc:94192e1
+          image: ghcr.io/networkservicemesh/ci/cmd-nsc:dd4b4f1
           imagePullPolicy: IfNotPresent
           env:
             - name: SPIFFE_ENDPOINT_SOCKET