diff --git a/app/config/security.yml b/app/config/security.yml
index 2998e74f39..0fbf4559f3 100644
--- a/app/config/security.yml
+++ b/app/config/security.yml
@@ -4,7 +4,7 @@
 parameters:
     sylius.security.admin_regex: "^/admin"
     sylius.security.api_regex: "^/api"
-    sylius.security.shop_regex: "^/(?!admin|api/.*|api$)[^/]++"
+    sylius.security.shop_regex: "^/(?!admin|api/.*|api$|media/.*)[^/]++"
 
 security:
     providers: