diff --git a/authentication-service/src/main/kotlin/com/saveourtool/save/authservice/config/WebSecurityConfig.kt b/authentication-service/src/main/kotlin/com/saveourtool/save/authservice/config/WebSecurityConfig.kt
index 94942679e9..33b121e830 100644
--- a/authentication-service/src/main/kotlin/com/saveourtool/save/authservice/config/WebSecurityConfig.kt
+++ b/authentication-service/src/main/kotlin/com/saveourtool/save/authservice/config/WebSecurityConfig.kt
@@ -127,7 +127,10 @@ class WebSecurityConfig(
             // `ProjectView`'s getProject should be public, all the permission filtering is done on backend
             "/api/$v1/projects/get/organization-name",
             // info on tags should be public
-            "/api/$v1/tags/**"
+            "/api/$v1/tags/**",
+            // cosv history and changes tabs should be public
+            "/api/$v1/cosv/list-versions",
+            "/api/$v1/cosv/cosv-content",
         )
     }
 }