diff --git a/changelog.d/20240122_093036_regis_jwt_security.md b/changelog.d/20240122_093036_regis_jwt_security.md
new file mode 100644
index 0000000..88ed777
--- /dev/null
+++ b/changelog.d/20240122_093036_regis_jwt_security.md
@@ -0,0 +1 @@
+- [Security] Fix JWT scopes in XBlock callbacks. (by @regisb)
diff --git a/tutor/templates/build/openedx/Dockerfile b/tutor/templates/build/openedx/Dockerfile
index 0aef8e8..51e7db4 100644
--- a/tutor/templates/build/openedx/Dockerfile
+++ b/tutor/templates/build/openedx/Dockerfile
@@ -51,6 +51,8 @@ RUN git config --global user.email "tutor@overhang.io" \
 {{ patch("openedx-dockerfile-git-patches-default") }}
 {%- else %}
 # Patch edx-platform
+# XBlock JWT security fix https://github.com/openedx/edx-platform/pull/34047
+RUN curl -fsSL https://github.com/openedx/edx-platform/commit/89f5f69682a5e1422f89e867491e8974dd0a8208.patch | git am
 {%- endif %}
 
 {# Example: RUN curl -fsSL https://github.com/openedx/edx-platform/commit/<GITSHA1>.patch | git am #}