diff --git a/terraform/environments/xhibit-portal/bastion_linux.tf b/terraform/environments/xhibit-portal/bastion_linux.tf
index 4791663a228..0d3b51f3492 100644
--- a/terraform/environments/xhibit-portal/bastion_linux.tf
+++ b/terraform/environments/xhibit-portal/bastion_linux.tf
@@ -5,7 +5,7 @@ locals {
 
 # tfsec:ignore:aws-s3-enable-bucket-encryption tfsec:ignore:aws-s3-encryption-customer-key tfsec:ignore:aws-s3-enable-bucket-logging tfsec:ignore:aws-s3-enable-versioning
 module "bastion_linux" {
-  source = "github.com/ministryofjustice/modernisation-platform-terraform-bastion-linux?ref=v4.0.0"
+  source = "github.com/ministryofjustice/modernisation-platform-terraform-bastion-linux?ref=v4.1.2"
 
   providers = {
     aws.share-host   = aws.core-vpc # core-vpc-(environment) holds the networking for all accounts