diff --git a/tksafety/api/routes/riskRoutes.js b/tksafety/api/routes/riskRoutes.js
index 9edc462..2caa0a4 100644
--- a/tksafety/api/routes/riskRoutes.js
+++ b/tksafety/api/routes/riskRoutes.js
@@ -6,13 +6,15 @@ const fs = require('fs');
 const riskController = require('../controllers/riskController');
 const { requireAuth, requireAdmin } = require('../middleware/auth');
 
-// 업로드 디렉토리 보장
+// 업로드 디렉토리 (multer destination에서 lazy 생성)
 const uploadDir = path.join(__dirname, '..', 'uploads', 'risk');
-if (!fs.existsSync(uploadDir)) fs.mkdirSync(uploadDir, { recursive: true });
 
 // Multer 설정
 const storage = multer.diskStorage({
-  destination: (req, file, cb) => cb(null, uploadDir),
+  destination: (req, file, cb) => {
+    try { if (!fs.existsSync(uploadDir)) fs.mkdirSync(uploadDir, { recursive: true }); } catch (e) { /* ignore */ }
+    cb(null, uploadDir);
+  },
   filename: (req, file, cb) => {
     const ext = path.extname(file.originalname);
     cb(null, `${req.params.mitigationId}_photo_${Date.now()}${ext}`);