diff --git a/build/dependencies.yaml b/build/dependencies.yaml
index 64096dd1988..72f4170e1c2 100644
--- a/build/dependencies.yaml
+++ b/build/dependencies.yaml
@@ -46,7 +46,7 @@ dependencies:
 
   # CRI Tools
   - name: "crictl"
-    version: 1.24.2
+    version: 1.25.0
     refPaths:
     - path: cluster/gce/windows/k8s-node-setup.psm1
       match: CRICTL_VERSION =
diff --git a/cluster/gce/gci/configure.sh b/cluster/gce/gci/configure.sh
index e1c5a94cc17..86d8f342e85 100644
--- a/cluster/gce/gci/configure.sh
+++ b/cluster/gce/gci/configure.sh
@@ -32,9 +32,9 @@ DEFAULT_AUTH_PROVIDER_GCP_HASH_AMD64='88d9fa581002973170ca58427763f00355b24fbabd
 DEFAULT_AUTH_PROVIDER_GCP_VERSION='v0.24.0'
 # TODO (SergeyKanzhelev): fill up for npd 0.8.9+
 DEFAULT_NPD_HASH_ARM64='8ccb42a862efdfc1f25ca9a22f3fd36f9fdff1ac618dd7d39e3b5991505dd610d432364420896ad71f42197a116f28a85dde58b129baa075ebb7312caa57f852'
-DEFAULT_CRICTL_VERSION='v1.24.2'
-DEFAULT_CRICTL_AMD64_SHA512='961188117863ca9af5b084e84691e372efee93ad09daf6a0422e8d75a5803f394d8968064f7ca89f14e8973766201e731241f32538cf2c8d91f0233e786302df'
-DEFAULT_CRICTL_ARM64_SHA512='ebd055e9b2888624d006decd582db742131ed815d059d529ba21eaf864becca98a84b20a10eec91051b9d837c6855d28d5042bf5e9a454f4540aec6b82d37e96'
+DEFAULT_CRICTL_VERSION='v1.25.0'
+DEFAULT_CRICTL_AMD64_SHA512='73a4293df9beeae2ffef1aa9850996506f5e9991ff5d818c312f4907c846847f44b9cd0adf976b9eac08359e95480e1dbafa3c3ec341c04ed5f1a7765e8be075'
+DEFAULT_CRICTL_ARM64_SHA512='76f9fb918360d7eff9c2ce5b0ca571917f0f0d91a05c567fe12b023f563eb4679a166b8ba522b2fd781e64778c72695c059a0b7cdf0959a9974d77918bf9ce34'
 DEFAULT_MOUNTER_TAR_SHA='7956fd42523de6b3107ddc3ce0e75233d2fcb78436ff07a1389b6eaac91fb2b1b72a08f7a219eaf96ba1ca4da8d45271002e0d60e0644e796c665f99bb356516'
 ###
 
diff --git a/cluster/gce/windows/k8s-node-setup.psm1 b/cluster/gce/windows/k8s-node-setup.psm1
index 014df7a49a0..f1f62f1bfd1 100644
--- a/cluster/gce/windows/k8s-node-setup.psm1
+++ b/cluster/gce/windows/k8s-node-setup.psm1
@@ -57,8 +57,8 @@ $GCE_METADATA_SERVER = "169.254.169.254"
 # exist until an initial HNS network has been created on the Windows node - see
 # Add_InitialHnsNetwork().
 $MGMT_ADAPTER_NAME = "vEthernet (Ethernet*"
-$CRICTL_VERSION = 'v1.24.2'
-$CRICTL_SHA256 = 'db202de544fb49ffc58d1aa4b574dfaed0aeb71c45a542715b42f7b739ff7394'
+$CRICTL_VERSION = 'v1.25.0'
+$CRICTL_SHA256 = '417ea8f615298732bd4ea271abff897a6e135d8c2c3af028323f4e8071b2e69d'
 
 Import-Module -Force C:\common.psm1