diff --git a/integration/images/image_list.go b/integration/images/image_list.go
index 53a59021c..6b4e80731 100644
--- a/integration/images/image_list.go
+++ b/integration/images/image_list.go
@@ -49,7 +49,7 @@ func initImages(imageListFile string) {
 	imageList = ImageList{
 		Alpine:           "docker.io/library/alpine:latest",
 		BusyBox:          "docker.io/library/busybox:latest",
-		Pause:            "registry.k8s.io/pause:3.7",
+		Pause:            "registry.k8s.io/pause:3.8",
 		ResourceConsumer: "registry.k8s.io/e2e-test-images/resource-consumer:1.10",
 		VolumeCopyUp:     "ghcr.io/containerd/volume-copy-up:2.1",
 		VolumeOwnership:  "ghcr.io/containerd/volume-ownership:2.1",
diff --git a/pkg/cri/config/config_unix.go b/pkg/cri/config/config_unix.go
index 2bbf1a370..7b471429c 100644
--- a/pkg/cri/config/config_unix.go
+++ b/pkg/cri/config/config_unix.go
@@ -94,7 +94,7 @@ func DefaultConfig() PluginConfig {
 			TLSKeyFile:  "",
 			TLSCertFile: "",
 		},
-		SandboxImage:                     "registry.k8s.io/pause:3.7",
+		SandboxImage:                     "registry.k8s.io/pause:3.8",
 		StatsCollectPeriod:               10,
 		SystemdCgroup:                    false,
 		MaxContainerLogLineSize:          16 * 1024,
diff --git a/pkg/cri/config/config_windows.go b/pkg/cri/config/config_windows.go
index d6e417fbb..1af0ff0a8 100644
--- a/pkg/cri/config/config_windows.go
+++ b/pkg/cri/config/config_windows.go
@@ -53,7 +53,7 @@ func DefaultConfig() PluginConfig {
 			TLSKeyFile:  "",
 			TLSCertFile: "",
 		},
-		SandboxImage:              "registry.k8s.io/pause:3.7",
+		SandboxImage:              "registry.k8s.io/pause:3.8",
 		StatsCollectPeriod:        10,
 		MaxContainerLogLineSize:   16 * 1024,
 		MaxConcurrentDownloads:    3,