diff --git a/infra/infra-security/src/main/kotlin/com/kw/infrasecurity/config/WebSecurityConfig.kt b/infra/infra-security/src/main/kotlin/com/kw/infrasecurity/config/WebSecurityConfig.kt
index 3e18c97..bcad2d4 100644
--- a/infra/infra-security/src/main/kotlin/com/kw/infrasecurity/config/WebSecurityConfig.kt
+++ b/infra/infra-security/src/main/kotlin/com/kw/infrasecurity/config/WebSecurityConfig.kt
@@ -71,11 +71,7 @@ class WebSecurityConfig(
     fun corsConfigurationSource(): CorsConfigurationSource {
         val configuration = CorsConfiguration()
 
-        configuration.allowedOriginPatterns = listOf(
-            "http://localhost:5173",
-            "http:kiwing.kr",
-            "https://kiwing.kr",
-        )
+        configuration.allowedOriginPatterns = allowedOrigins.split(",").map { it.trim() }
         configuration.allowCredentials = true
         configuration.allowedHeaders = listOf("*")
         configuration.allowedMethods = listOf("HEAD", "GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS")