Deleting an attachment from a note item with multiple attachments causes other attachments to no longer visible

[rmcdowell-bitwarden]

Steps To Reproduce

1. Login to Bitwarden's web vault (https://vault.bitwarden.com)
2. Attach multiple attachments to a note item in the vault
3. Delete one attachment

Expected Result

The remaining attachments are accessible.

Actual Result

The item shows no attachments attached to it and are no longer accessible.

Screenshots or Videos

No response

Additional Context

The vault item was viewed through multiple clients and does not display the attachments in any client.

Operating System

macOS

Operating System Version

15.4 (24E248)

Web Browser

Chrome

Browser Version

Version 135.0.7049.42 (Official Build) (arm64)

Build Version

2025.3.1

Issue Tracking Info

• I understand that work is tracked outside of Github. A PR will be linked to this issue should one be opened to address it, but Bitwarden doesn't use fields like "assigned", "milestone", or "project" to track progress.

[S-Kakar]

Thank you for reporting this issue! We've added this to our internal tracking system.
ID: PM-19926

[hotarubi]

I reported this to support, the client I use is actually MacOS native client, not web, but maybe web has the same issue, as it looks like the backend API throws errors.

[awoisoak]

Replicated via browser, Chrome extension, Mac app (2025.2.0) & API.
Attempts to upload new attachments throws the next (Mac app & API):

An unhandled server error has occurred

[matthlsile]

Maybe this is related. I can't upload attachments any more. No matter what Client / OS / Browser / Browser extension i use:

#14160

[mech-tools]

Same here. Replicated the issue with:

• Bitwarden's web vault on Brave
• Brave with Chrome extension
• Bitwarden's windows application
• Android application

As for data loss due to this bug, I quote the support: "Bitwarden operates on a zero-knowledge encryption model, which means that we do not have access to your master password or the contents of your vault. As a result, we are unable to recover the contents of a specific note if it is lost or inaccessible."
And got no answer about replacing the entire vault with a previous version (backup).

You might want to resolve this issue as quickly as possible, or at least disable attachment deletion before anyone else lose their data.

[DaveKaretnyk]

I am (one of) the people that reported this issue to Bitwarden support. From what I have seen, the breaking change was probably delivered relatively recently i.e. within the last ~2 weeks. I say this because: 1) the backup routine I have is regular every Sunday: 6th of April it failed; 30th of March it was ok.

I have the problem on multiple machines, and with both the Browser interface (Chrome and Firefox), and the Windows 11 desktop app. My desktop app is set to automatically update when a new version is available (but I do not know when the last update took place).

Other important point: the desktop app gives a clear error message; the browser app does not.

I am a long term user and supporter of Bitwarden (and Open Source in general). But I do hope this important issues can be fixed quickly.

[spawnz0]

Replying to show support for this issue. I created a ticket and support told me about this github issue. I cannot upload any attachments. Even if it glitches and the attachment ends up showing, going to download it just results in a 500 error. I have this happen on Windows Edge extension and even Web Vault.

== Console error logs: ==

When uploading file:

POST https://vault.bitwarden.com/api/ciphers/0d1124cb67-f23c-47e7-b4d3-b2b132484da/attachment/v2 500 (Internal Server Error)
console-log.service.ts:53
Error: An unhandled server error has occurred.
at useClass. (cipher-file-upload.service.ts:62:15)
at Generator.throw ()
at a (main.61c7858….js:3:657339)
at Object.onInvoke (ng_zone.ts:470:25)
at Object.onInvokeTask (ng_zone.ts:447:25)

When trying to download the "fake file":

download-attachment.component.ts:83
GET https://bitwardenxx5keu3w.blob.core.windows.net/attachments-v2/0d14cb67-f23c-47e7-b8d8-b2b9002384da/8pyvlwfhzk0e5ypt7bxmylw5ns1emyod?sv=2024-08-04&se=2025-04-08T19%3A53%3A11Z&sr=b&sp=r&sig=Fyh3Qfhmytfi48IC6T%2FIQwA2pLWWK%2FEU7DOOnzsRTy0%3D 404 (The specified blob does not exist.)

[parrot-tailor]

This is tagged "web" but it's the API is throwing errors. Can confirm this is also an issue on iOS and the Firefox extension. Status page also says everything is "operating normally" but we're clearly having issues uploading attachments and attachments being deleted.

[geekitude]

I am not sure but maybe this could be usefull...
I opened web vault in private browser and was still unable to see old attachments on an ID after loosing them yesterday when trying to replace one of them and was still unable to add one.
I created a new ID and was abble to add an attachment (the same file I cannot attach to old existing ID).

I also don't get same menu for old and new IDs :

[Diktiorwalle]

Same issue with macOS 12.7.6

Brave Version 1.77.97 Chromium: 135.0.7049.84 (Official Build) (x86_64)

attachments disappearing unable to upload attachments again.

[matthlsile]

This is horrible. I lost an certificate file because of that. This bug should get top priority. Not happy with how negligent this is handled.

[mvmike]

I am also surprised by the lack of prioritisation and comms that this issue has received so far, mostly because of the data loss associated with it.

Found this open bug in github after writing to Bitwarden's support too, and basically it renders the product unusable for me (my workflow requires updating attachments frequently, which seems to be temporarily gone for my account). We all know that these things happen and providing an ETA might be tricky, but there needs to be acknowledgment and progress updates.

[Diktiorwalle]

I would like to know the procedures Bitwarden has followed for updating their products/solutions;
like testing period
how has been tested, for example which browsers, os, etc
and rollout, first to a fast ring and later on to the slow ring or immediately to all Bitwarden users.
and what about a fallback scenario, is it in place and why the fallback scenario has not been executed.

When data( attachments) can be recovered:
What about the damage it has caused (lost of data), is there going to be any financial compensation?

This issue should be treated with the highest priority possible and the CEO should notify users about his issue immediately. Look at what happened at Lastpass.