diff --git a/tenant-service/src/main/java/com/xuqm/tenant/config/SecurityConfig.java b/tenant-service/src/main/java/com/xuqm/tenant/config/SecurityConfig.java
index f2302ae..160cd6b 100644
--- a/tenant-service/src/main/java/com/xuqm/tenant/config/SecurityConfig.java
+++ b/tenant-service/src/main/java/com/xuqm/tenant/config/SecurityConfig.java
@@ -41,6 +41,7 @@ public class SecurityConfig {
                     "/api/migrate/export",          // key-based auth, no JWT
                     "/api/private/deployment/migrate/import",  // private deployment only, no JWT
                     "/api/private/admin/**",         // private deployment internal maintenance, no JWT
+                    "/api/system/versions/manifest", // 公开：私有部署拉取云端最新版本清单，无需鉴权
                     "/actuator/health",
                     "/actuator/info"
                 ).permitAll()