diff --git a/bin/install_upgrade.escript b/bin/install_upgrade.escript
index 88268d893..a1603d440 100755
--- a/bin/install_upgrade.escript
+++ b/bin/install_upgrade.escript
@@ -32,6 +32,7 @@ main(Args) ->
 unpack({RelName, NameTypeArg, NodeName, Cookie}, Opts) ->
     TargetNode = start_distribution(NodeName, NameTypeArg, Cookie),
     Version = proplists:get_value(version, Opts),
+    validate_target_version(Version, TargetNode),
     case unpack_release(RelName, TargetNode, Version) of
         {ok, Vsn} ->
             ?INFO("Unpacked successfully: ~p", [Vsn]);
diff --git a/changes/v4.3.23-en.md b/changes/v4.3.23-en.md
index c3d6216ed..ee0974064 100644
--- a/changes/v4.3.23-en.md
+++ b/changes/v4.3.23-en.md
@@ -11,3 +11,5 @@
 ## Bug fixes
 
 - Fix a bug where the JWT ACL would not short-circuit with a deny response when the token is expired [#9338](https://github.com/emqx/emqx/pull/9338).
+
+- Added check for target version when unpacking a package for hot-upgrade.  The unpacking could lead to unresponsive node commands.  [#9470](https://github.com/emqx/emqx/pull/9470)
diff --git a/changes/v4.3.23-zh.md b/changes/v4.3.23-zh.md
index 4f486f186..d416b10c6 100644
--- a/changes/v4.3.23-zh.md
+++ b/changes/v4.3.23-zh.md
@@ -11,3 +11,5 @@
 ## 修复
 
 - 修复 JWT ACL 在令牌超期后授权检查不生效的问题 [#9338](https://github.com/emqx/emqx/pull/9338)。
+
+- 为热升级解压软件包时增加了对目标版本的检查。 解包可能导致节点命令无响应。  [#9470](https://github.com/emqx/emqx/pull/9470)