diff --git a/CHANGELOG.md b/CHANGELOG.md
index c5089c6c06..bc232f8530 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -26,6 +26,14 @@ Canonical reference for changes, improvements, and bugfixes for Boundary.
 * Removed the error log during RDP basic settings exchange: When you connect to
   an RDP target using the built-in Windows Remote Desktop Connection app. ([PR](https://github.com/hashicorp/boundary/pull/6136))
 
+## 0.20.2 (2026/02/10)
+
+### Security
+
+* Go version bumped to 1.25.7 to address CVE-2025-61730 ([PR](https://github.com/hashicorp/boundary/pull/6409))
+* Go Cryptography dependency update to address CVE-2025-58181 and CVE-2025-47914
+  ([PR](https://github.com/hashicorp/boundary/pull/6272))
+
 ## 0.20.1 (2025/11/03)
 
 ### New and Improved