diff --git a/charts/chart_versions.yaml b/charts/chart_versions.yaml
index 15bd285b75..64e7e523f2 100644
--- a/charts/chart_versions.yaml
+++ b/charts/chart_versions.yaml
@@ -14,7 +14,7 @@ charts:
   - version: 1.36.102
     filename: /charts/rke2-coredns.yaml
     bootstrap: true
-  - version: 4.12.002
+  - version: 4.12.003
     filename: /charts/rke2-ingress-nginx.yaml
     bootstrap: false
   - version: 27.0.200
diff --git a/scripts/build-images b/scripts/build-images
index e6d806b21b..e4269e096f 100755
--- a/scripts/build-images
+++ b/scripts/build-images
@@ -23,7 +23,7 @@ xargs -n1 -t docker image pull --quiet << EOF >> build/images-core.txt
     ${REGISTRY}/rancher/klipper-lb:v0.4.9
     ${REGISTRY}/rancher/mirrored-pause:${PAUSE_VERSION}
     ${REGISTRY}/rancher/mirrored-ingress-nginx-kube-webhook-certgen:v1.5.0
-    ${REGISTRY}/rancher/nginx-ingress-controller:v1.12.0-hardened1
+    ${REGISTRY}/rancher/nginx-ingress-controller:v1.12.0-hardened2
     ${REGISTRY}/rancher/rke2-cloud-provider:${CCM_VERSION}
     ${REGISTRY}/rancher/mirrored-sig-storage-snapshot-controller:v8.2.0
 EOF