diff --git a/sdk/cosmos/azure-cosmos-spark_3/pom.xml b/sdk/cosmos/azure-cosmos-spark_3/pom.xml
index 2405150dc171..227ba4b475e0 100644
--- a/sdk/cosmos/azure-cosmos-spark_3/pom.xml
+++ b/sdk/cosmos/azure-cosmos-spark_3/pom.xml
@@ -136,6 +136,12 @@
         </exclusion>
       </exclusions>
     </dependency>
+    <dependency>
+      <groupId>org.apache.commons</groupId>
+      <artifactId>commons-lang3</artifactId>
+      <version>3.18.0</version> <!-- {x-version-update;org.apache.commons:commons-lang3;external_dependency} -->
+      <scope>test</scope>
+    </dependency>
     <dependency>
       <groupId>com.fasterxml.jackson.module</groupId>
       <artifactId>jackson-module-afterburner</artifactId>
diff --git a/sdk/cosmos/azure-cosmos-spark_4-0_2-13/CHANGELOG.md b/sdk/cosmos/azure-cosmos-spark_4-0_2-13/CHANGELOG.md
index 5f9d792231c9..07ccee3658b7 100644
--- a/sdk/cosmos/azure-cosmos-spark_4-0_2-13/CHANGELOG.md
+++ b/sdk/cosmos/azure-cosmos-spark_4-0_2-13/CHANGELOG.md
@@ -10,6 +10,8 @@
 
 #### Other Changes
 
+* Excluded `commons-lang` 2.6 from the shaded connector JAR. The existing `azure-core-http-netty` 1.16.5 and `azure-identity` 1.18.4 dependencies provide Netty 4.1.135.Final and MSAL4J 1.23.1, respectively.
+
 ### 4.49.2 (2026-07-27)
 
 #### Bugs Fixed
diff --git a/sdk/cosmos/azure-cosmos-spark_4-0_2-13/pom.xml b/sdk/cosmos/azure-cosmos-spark_4-0_2-13/pom.xml
index 7e208a4df7b1..ff9b121e6022 100644
--- a/sdk/cosmos/azure-cosmos-spark_4-0_2-13/pom.xml
+++ b/sdk/cosmos/azure-cosmos-spark_4-0_2-13/pom.xml
@@ -192,6 +192,10 @@
           <groupId>io.netty</groupId>
           <artifactId>netty-all</artifactId>
         </exclusion>
+        <exclusion>
+          <groupId>commons-lang</groupId>
+          <artifactId>commons-lang</artifactId>
+        </exclusion>
         <exclusion>
           <groupId>org.slf4j</groupId>
           <artifactId>*</artifactId>
diff --git a/sdk/cosmos/azure-cosmos-spark_4-1_2-13/CHANGELOG.md b/sdk/cosmos/azure-cosmos-spark_4-1_2-13/CHANGELOG.md
index 118ebba13412..e1a267aa3ffb 100644
--- a/sdk/cosmos/azure-cosmos-spark_4-1_2-13/CHANGELOG.md
+++ b/sdk/cosmos/azure-cosmos-spark_4-1_2-13/CHANGELOG.md
@@ -10,6 +10,8 @@
 
 #### Other Changes
 
+* Excluded `commons-lang` 2.6 from the shaded connector JAR. The existing `azure-core-http-netty` 1.16.5 and `azure-identity` 1.18.4 dependencies provide Netty 4.1.135.Final and MSAL4J 1.23.1, respectively.
+
 ### 4.49.2 (2026-07-27)
 
 #### Bugs Fixed
diff --git a/sdk/cosmos/azure-cosmos-spark_4-1_2-13/pom.xml b/sdk/cosmos/azure-cosmos-spark_4-1_2-13/pom.xml
index 81802fe1e018..c856d18de21e 100644
--- a/sdk/cosmos/azure-cosmos-spark_4-1_2-13/pom.xml
+++ b/sdk/cosmos/azure-cosmos-spark_4-1_2-13/pom.xml
@@ -239,6 +239,10 @@
           <groupId>io.netty</groupId>
           <artifactId>netty-all</artifactId>
         </exclusion>
+        <exclusion>
+          <groupId>commons-lang</groupId>
+          <artifactId>commons-lang</artifactId>
+        </exclusion>
         <exclusion>
           <groupId>org.slf4j</groupId>
           <artifactId>*</artifactId>