error decrypting data.json when account belongs to an organization

[kpiris]

When I try to decrypt the data.json file from a bitwarden cli test account I get the following error:

ERROR: MAC did not match. Protected Symmetric Key was not decrypted. (Password may be wrong)

This test account belongs to an organization, and if I purge the organization vault then I'm able to decrypt the data.json file just fine (to clarify: the account is still member of the organization, but it's vault is empty).

There has to be something about the org vault items decryption that's causing the error.

But I haven't been able to find out exactly what it is.

After some more testing I could reproduce the error with a single item in the organization vault that has an attachment. If I delete that attachment from the item, then I'm able to decrypt the data.json file again.

Thanks.

[GurpreetKang]

So it's the attachment that is causing the issue and not a general issue with having an item in an organization vault?

[kpiris]

That's what it seems.

If an item in the org vault has an attachments, then I get that error.

I remove the attachment from that item and then it decrypts ok.

I can also edit manually the data.json and delete the json values corresponding to the attachment and then it also decrypts ok.

If you do not have an organization where you can upload attachments I can provide you a data.json example file.

[GurpreetKang]

Thanks for confirming. I'll create a new test account and try to reproduce this myself. I'll reach out to you if I need it but I think I should be okay.