diff --git a/CHANGES-5.0.md b/CHANGES-5.0.md
index 6e78d3532..f885aae8f 100644
--- a/CHANGES-5.0.md
+++ b/CHANGES-5.0.md
@@ -10,6 +10,7 @@
   This change fixed it to only send back the message ID.
 * Add /trace/:name/log_detail HTTP API to return trace file's size and mtime [#9152](https://github.com/emqx/emqx/pull/9152)
 * Allow clear retained/delayed data when client is banned.[#9139](https://github.com/emqx/emqx/pull/9139)
+* Update `gen_rpc` library to version 3.0 [#9187](https://github.com/emqx/emqx/pull/9187)
 
 ## Bug fixes
 
diff --git a/apps/emqx_conf/i18n/emqx_conf_schema.conf b/apps/emqx_conf/i18n/emqx_conf_schema.conf
index fb986785b..101823d5f 100644
--- a/apps/emqx_conf/i18n/emqx_conf_schema.conf
+++ b/apps/emqx_conf/i18n/emqx_conf_schema.conf
@@ -973,6 +973,17 @@ until the RPC connection is considered lost."""
     }
   }
 
+  rpc_insecure_fallback {
+    desc {
+      en: """Enable compatibility with old RPC authentication."""
+      zh: """兼容旧的无鉴权模式"""
+    }
+    label {
+      en: "RPC insecure fallback"
+      zh: "向后兼容旧的无鉴权模式"
+    }
+  }
+
   log_file_handlers {
     desc {
       en: """File-based log handlers."""
diff --git a/apps/emqx_conf/src/emqx_conf_schema.erl b/apps/emqx_conf/src/emqx_conf_schema.erl
index ec61cb508..4de952d2e 100644
--- a/apps/emqx_conf/src/emqx_conf_schema.erl
+++ b/apps/emqx_conf/src/emqx_conf_schema.erl
@@ -814,6 +814,15 @@ fields("rpc") ->
                     default => "1MB",
                     desc => ?DESC(rpc_socket_buffer)
                 }
+            )},
+        {"insecure_fallback",
+            sc(
+                boolean(),
+                #{
+                    mapping => "gen_rpc.insecure_auth_fallback_allowed",
+                    default => true,
+                    desc => ?DESC(rpc_insecure_fallback)
+                }
             )}
     ];
 fields("log") ->