diff --git a/api/src/main/java/com/urpsys/baseapi/common/util/CommonUtil.java b/api/src/main/java/com/urpsys/baseapi/common/util/CommonUtil.java
index cbf600b3..7aaf158b 100644
--- a/api/src/main/java/com/urpsys/baseapi/common/util/CommonUtil.java
+++ b/api/src/main/java/com/urpsys/baseapi/common/util/CommonUtil.java
@@ -492,8 +492,11 @@ public class CommonUtil
 			 */
 			
 			String strTocken = "";
+			// 2026-07-19 fix: 2번째 replace 가 authorization(원문)을 다시 읽어 strTocken 을 덮어써
+			//   "Bearer " 접두가 남던 버그 → JwtHelper.decode 시 MalformedInputException.
+			//   strTocken 기준으로 연쇄 치환하도록 정정(대/소문자 모두 제거).
 			strTocken = StringUtils.replace(authorization, "Bearer ","");
-			strTocken = StringUtils.replace(authorization, "bearer ","");
+			strTocken = StringUtils.replace(strTocken, "bearer ","");
 			
 			Jwt jwt = JwtHelper.decode(strTocken);