[GH-ISSUE #3770] error when moving item to vault "Organization mismatch. Please resync the client before updating the cipher" #1664

New issue

Closed

opened 2026-03-03 02:11:03 +03:00 by kerem · 5 comments

kerem commented 2026-03-03 02:11:03 +03:00

Owner

Copy link

Originally created by @catdevnull on GitHub (Aug 13, 2023).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/3770

Subject of the issue

when trying to add an item to a new organization, an error that says "Organization mismatch. Please resync the client before updating the cipher" appears (like #346)

even after restarting, the same thing happens

Deployment environment

Your environment (Generated via diagnostics page)

• Vaultwarden version: v1.29.1
• Web-vault version: v2023.5.0
• OS/Arch: linux/x86_64
• Running within Docker: true (Base: Debian)
• Environment settings overridden: true
• Uses a reverse proxy: true
• IP Header check: true (X-Real-IP)
• Internet access: true
• Internet access via a proxy: false
• DNS Check: true
• Browser/Server Time Check: true
• Server/NTP Time Check: true
• Domain Configuration Check: true
• HTTPS Check: true
• Database type: SQLite
• Database version: 3.41.2
• Clients used:
• Reverse proxy and version:
• Other relevant information:

Config (Generated via diagnostics page)

Show Running Config

Environment settings which are overridden: DOMAIN, ADMIN_TOKEN

{
  "_duo_akey": null,
  "_enable_duo": false,
  "_enable_email_2fa": false,
  "_enable_smtp": true,
  "_enable_yubico": true,
  "_icon_service_csp": "",
  "_icon_service_url": "",
  "_ip_header_enabled": true,
  "_smtp_img_src": "cid:",
  "admin_ratelimit_max_burst": 3,
  "admin_ratelimit_seconds": 300,
  "admin_session_lifetime": 20,
  "admin_token": "***",
  "allowed_iframe_ancestors": "",
  "attachments_folder": "data/attachments",
  "authenticator_disable_time_drift": false,
  "data_folder": "data",
  "database_conn_init": "",
  "database_max_conns": 10,
  "database_timeout": 30,
  "database_url": "***************",
  "db_connection_retries": 15,
  "disable_2fa_remember": false,
  "disable_admin_token": false,
  "disable_icon_download": false,
  "domain": "*****://*******************",
  "domain_origin": "*****://*******************",
  "domain_path": "",
  "domain_set": true,
  "duo_host": null,
  "duo_ikey": null,
  "duo_skey": null,
  "email_attempts_limit": 3,
  "email_expiration_time": 600,
  "email_token_size": 6,
  "emergency_access_allowed": true,
  "emergency_notification_reminder_schedule": "0 3 * * * *",
  "emergency_request_timeout_schedule": "0 7 * * * *",
  "enable_db_wal": true,
  "event_cleanup_schedule": "0 10 0 * * *",
  "events_days_retain": null,
  "extended_logging": true,
  "helo_name": null,
  "hibp_api_key": null,
  "icon_blacklist_non_global_ips": true,
  "icon_blacklist_regex": null,
  "icon_cache_folder": "data/icon_cache",
  "icon_cache_negttl": 259200,
  "icon_cache_ttl": 2592000,
  "icon_download_timeout": 10,
  "icon_redirect_code": 302,
  "icon_service": "internal",
  "incomplete_2fa_schedule": "30 * * * * *",
  "incomplete_2fa_time_limit": 3,
  "invitation_expiration_hours": 120,
  "invitation_org_name": "Sutty",
  "invitations_allowed": true,
  "ip_header": "X-Real-IP",
  "job_poll_interval_ms": 30000,
  "log_file": null,
  "log_level": "Info",
  "log_timestamp_format": "%Y-%m-%d %H:%M:%S.%3f",
  "login_ratelimit_max_burst": 10,
  "login_ratelimit_seconds": 60,
  "org_attachment_limit": null,
  "org_creation_users": "",
  "org_events_enabled": false,
  "org_groups_enabled": false,
  "password_hints_allowed": true,
  "password_iterations": 100000,
  "push_enabled": false,
  "push_installation_id": "***",
  "push_installation_key": "***",
  "push_relay_uri": "https://push.bitwarden.com",
  "reload_templates": false,
  "require_device_email": false,
  "rsa_key_filename": "data/rsa_key",
  "send_purge_schedule": "0 5 * * * *",
  "sendmail_command": null,
  "sends_allowed": true,
  "sends_folder": "data/sends",
  "show_password_hint": false,
  "signups_allowed": false,
  "signups_domains_whitelist": "",
  "signups_verify": true,
  "signups_verify_resend_limit": 6,
  "signups_verify_resend_time": 3600,
  "smtp_accept_invalid_certs": false,
  "smtp_accept_invalid_hostnames": false,
  "smtp_auth_mechanism": null,
  "smtp_debug": false,
  "smtp_embed_images": true,
  "smtp_explicit_tls": true,
  "smtp_from": "*********************",
  "smtp_from_name": "Vaultwarden",
  "smtp_host": "***************",
  "smtp_password": "***",
  "smtp_port": 465,
  "smtp_security": "force_tls",
  "smtp_ssl": true,
  "smtp_timeout": 15,
  "smtp_username": "*********************",
  "templates_folder": "data/templates",
  "tmp_folder": "data/tmp",
  "trash_auto_delete_days": null,
  "trash_purge_schedule": "0 5 0 * * *",
  "use_sendmail": false,
  "use_syslog": false,
  "user_attachment_limit": null,
  "web_vault_enabled": true,
  "web_vault_folder": "web-vault/",
  "websocket_address": "0.0.0.0",
  "websocket_enabled": true,
  "websocket_port": 3012,
  "yubico_client_id": null,
  "yubico_secret_key": null,
  "yubico_server": null
}

• Install method: Docker

• Clients used: Web vault

• Reverse proxy and version: Caddy 2

Steps to reproduce

1. create a new organization
2. try to move an item from the user vault to the org vault

Expected behaviour

it works

Actual behaviour

it shows this error

Troubleshooting data

config-vaultwarden-1  | [2023-08-13 13:02:11.351][request][INFO] PUT /api/ciphers/REDACTED UUID/share
config-vaultwarden-1  | [2023-08-13 13:02:11.358][vaultwarden::api::core::ciphers][ERROR] Organization mismatch. Please resync the client before updating the cipher
config-vaultwarden-1  | [2023-08-13 13:02:11.358][response][INFO] (put_cipher_share) PUT /api/ciphers/<uuid>/share => 400 Bad Request

Originally created by @catdevnull on GitHub (Aug 13, 2023). Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/3770 <!-- # ### NOTE: Please update to the latest version of vaultwarden before reporting an issue! This saves you and us a lot of time and troubleshooting. See: * https://github.com/dani-garcia/vaultwarden/issues/1180 * https://github.com/dani-garcia/vaultwarden/wiki/Updating-the-vaultwarden-image # ### --> <!-- Please fill out the following template to make solving your problem easier and faster for us. This is only a guideline. If you think that parts are unnecessary for your issue, feel free to remove them. Remember to hide/redact personal or confidential information, such as passwords, IP addresses, and DNS names as appropriate. --> ### Subject of the issue <!-- Describe your issue here. --> when trying to add an item to a new organization, an error that says "Organization mismatch. Please resync the client before updating the cipher" appears (like #346) even after restarting, the same thing happens ### Deployment environment <!-- ========================================================================================= Preferably, use the `Generate Support String` button on the admin page's Diagnostics tab. That will auto-generate most of the info requested in this section. ========================================================================================= --> ### Your environment (Generated via diagnostics page) * Vaultwarden version: v1.29.1 * Web-vault version: v2023.5.0 * OS/Arch: linux/x86_64 * Running within Docker: true (Base: Debian) * Environment settings overridden: true * Uses a reverse proxy: true * IP Header check: true (X-Real-IP) * Internet access: true * Internet access via a proxy: false * DNS Check: true * Browser/Server Time Check: true * Server/NTP Time Check: true * Domain Configuration Check: true * HTTPS Check: true * Database type: SQLite * Database version: 3.41.2 * Clients used: * Reverse proxy and version: * Other relevant information: ### Config (Generated via diagnostics page) <details><summary>Show Running Config</summary> **Environment settings which are overridden:** DOMAIN, ADMIN_TOKEN ```json { "_duo_akey": null, "_enable_duo": false, "_enable_email_2fa": false, "_enable_smtp": true, "_enable_yubico": true, "_icon_service_csp": "", "_icon_service_url": "", "_ip_header_enabled": true, "_smtp_img_src": "cid:", "admin_ratelimit_max_burst": 3, "admin_ratelimit_seconds": 300, "admin_session_lifetime": 20, "admin_token": "***", "allowed_iframe_ancestors": "", "attachments_folder": "data/attachments", "authenticator_disable_time_drift": false, "data_folder": "data", "database_conn_init": "", "database_max_conns": 10, "database_timeout": 30, "database_url": "***************", "db_connection_retries": 15, "disable_2fa_remember": false, "disable_admin_token": false, "disable_icon_download": false, "domain": "*****://*******************", "domain_origin": "*****://*******************", "domain_path": "", "domain_set": true, "duo_host": null, "duo_ikey": null, "duo_skey": null, "email_attempts_limit": 3, "email_expiration_time": 600, "email_token_size": 6, "emergency_access_allowed": true, "emergency_notification_reminder_schedule": "0 3 * * * *", "emergency_request_timeout_schedule": "0 7 * * * *", "enable_db_wal": true, "event_cleanup_schedule": "0 10 0 * * *", "events_days_retain": null, "extended_logging": true, "helo_name": null, "hibp_api_key": null, "icon_blacklist_non_global_ips": true, "icon_blacklist_regex": null, "icon_cache_folder": "data/icon_cache", "icon_cache_negttl": 259200, "icon_cache_ttl": 2592000, "icon_download_timeout": 10, "icon_redirect_code": 302, "icon_service": "internal", "incomplete_2fa_schedule": "30 * * * * *", "incomplete_2fa_time_limit": 3, "invitation_expiration_hours": 120, "invitation_org_name": "Sutty", "invitations_allowed": true, "ip_header": "X-Real-IP", "job_poll_interval_ms": 30000, "log_file": null, "log_level": "Info", "log_timestamp_format": "%Y-%m-%d %H:%M:%S.%3f", "login_ratelimit_max_burst": 10, "login_ratelimit_seconds": 60, "org_attachment_limit": null, "org_creation_users": "", "org_events_enabled": false, "org_groups_enabled": false, "password_hints_allowed": true, "password_iterations": 100000, "push_enabled": false, "push_installation_id": "***", "push_installation_key": "***", "push_relay_uri": "https://push.bitwarden.com", "reload_templates": false, "require_device_email": false, "rsa_key_filename": "data/rsa_key", "send_purge_schedule": "0 5 * * * *", "sendmail_command": null, "sends_allowed": true, "sends_folder": "data/sends", "show_password_hint": false, "signups_allowed": false, "signups_domains_whitelist": "", "signups_verify": true, "signups_verify_resend_limit": 6, "signups_verify_resend_time": 3600, "smtp_accept_invalid_certs": false, "smtp_accept_invalid_hostnames": false, "smtp_auth_mechanism": null, "smtp_debug": false, "smtp_embed_images": true, "smtp_explicit_tls": true, "smtp_from": "*********************", "smtp_from_name": "Vaultwarden", "smtp_host": "***************", "smtp_password": "***", "smtp_port": 465, "smtp_security": "force_tls", "smtp_ssl": true, "smtp_timeout": 15, "smtp_username": "*********************", "templates_folder": "data/templates", "tmp_folder": "data/tmp", "trash_auto_delete_days": null, "trash_purge_schedule": "0 5 0 * * *", "use_sendmail": false, "use_syslog": false, "user_attachment_limit": null, "web_vault_enabled": true, "web_vault_folder": "web-vault/", "websocket_address": "0.0.0.0", "websocket_enabled": true, "websocket_port": 3012, "yubico_client_id": null, "yubico_secret_key": null, "yubico_server": null } ``` </details> <!-- How the server was installed: Docker image, OS package, built from source, etc. --> * Install method: Docker * Clients used: Web vault <!-- web vault, desktop, Android, iOS, etc. (if applicable) --> * Reverse proxy and version: Caddy 2 ### Steps to reproduce <!-- Tell us how to reproduce this issue. What parameters did you set (differently from the defaults) and how did you start vaultwarden? --> 1. create a new organization 2. try to move an item from the user vault to the org vault ### Expected behaviour <!-- Tell us what you expected to happen --> it works ### Actual behaviour <!-- Tell us what actually happened --> it shows this error  ### Troubleshooting data <!-- Share any log files, screenshots, or other relevant troubleshooting data --> ``` config-vaultwarden-1 | [2023-08-13 13:02:11.351][request][INFO] PUT /api/ciphers/REDACTED UUID/share config-vaultwarden-1 | [2023-08-13 13:02:11.358][vaultwarden::api::core::ciphers][ERROR] Organization mismatch. Please resync the client before updating the cipher config-vaultwarden-1 | [2023-08-13 13:02:11.358][response][INFO] (put_cipher_share) PUT /api/ciphers/<uuid>/share => 400 Bad Request ```

kerem closed this issue 2026-03-03 02:11:03 +03:00

kerem commented 2026-03-03 02:11:04 +03:00

Author

Owner

Copy link

@BlackDex commented on GitHub (Aug 13, 2023):

Have you tried to logout and login again?

<!-- gh-comment-id:1676359896 --> @BlackDex commented on GitHub (Aug 13, 2023): Have you tried to logout and login again?

kerem commented 2026-03-03 02:11:04 +03:00

Author

Owner

Copy link

@catdevnull commented on GitHub (Aug 13, 2023):

yes, the same error appears.

<!-- gh-comment-id:1676361987 --> @catdevnull commented on GitHub (Aug 13, 2023): yes, the same error appears.

kerem commented 2026-03-03 02:11:04 +03:00

Author

Owner

Copy link

@BlackDex commented on GitHub (Aug 13, 2023):

According to the error the UUID of the organization is not valid compared to the data posted.
Try to use the Browsers Dev Console (F12) and see if the Posted data, and then in particular the organizationId in the cipher tree if that matches or is correct with the organization uuid you want it to move to.

It seems to actually say that the specific cipher already is assigned to an other organization. And moving from one org to an other is not possible.

Not sure how that cipher which is in your own vault is registered in the database, but that should then contain an org uuid already. And that is what makes it break currently.

I just tried the steps, and it works just fine for me.

<!-- gh-comment-id:1676376946 --> @BlackDex commented on GitHub (Aug 13, 2023): According to the error the UUID of the organization is not valid compared to the data posted. Try to use the Browsers Dev Console (F12) and see if the Posted data, and then in particular the `organizationId` in the `cipher` tree if that matches or is correct with the organization uuid you want it to move to. It seems to actually say that the specific cipher already is assigned to an other organization. And moving from one org to an other is not possible. Not sure how that cipher which is in your own vault is registered in the database, but that should then contain an org uuid already. And that is what makes it break currently. I just tried the steps, and it works just fine for me.

kerem commented 2026-03-03 02:11:04 +03:00

Author

Owner

Copy link

@catdevnull commented on GitHub (Aug 13, 2023):

well, the organizationId does appear to match.

And moving from one org to an other is not possible.

i guess this is what's going wrong. why is it not possible? sounds like a bug

<!-- gh-comment-id:1676384960 --> @catdevnull commented on GitHub (Aug 13, 2023): well, the organizationId does appear to match. >And moving from one org to an other is not possible. i guess this is what's going wrong. why is it not possible? sounds like a bug

kerem commented 2026-03-03 02:11:04 +03:00

Author

Owner

Copy link

@BlackDex commented on GitHub (Aug 13, 2023):

Moving from one org to an other isn't possible at all. I think you are trying to use the selectable menu at the top right to just move one (or more) item(s). That will only work for personal items, not for other organizational items.

You need to clone the items instead of moving them.

So, this is by design.

<!-- gh-comment-id:1676392315 --> @BlackDex commented on GitHub (Aug 13, 2023): Moving from one org to an other isn't possible at all. I think you are trying to use the `selectable` menu at the top right to just move one (or more) item(s). That will only work for personal items, not for other organizational items. You need to clone the items instead of moving them. So, this is by design.

Sign in to join this conversation.

No Branch/Tag specified

Branches Tags

main

revert-7033-patch-1

cached-config-operations

test_dylint

1.35.8

1.35.7

1.35.6

1.35.5

1.35.4

1.35.3

1.35.2

1.35.1

1.35.0

1.34.3

1.34.2

1.34.1

1.34.0

1.33.2

1.33.1

1.33.0

1.32.7

1.32.6

1.32.5

1.32.4

1.32.3

1.32.2

1.32.1

1.32.0

1.31.0

1.30.5

1.30.4

1.30.3

1.30.2

1.30.1

1.30.0

1.29.2

1.29.1

1.29.0

1.28.1

1.28.0

1.27.0

1.26.0

1.25.2

1.25.1

1.25.0

1.24.0

1.23.1

1.23.0

1.22.2

1.22.1

1.22.0

1.21.0

1.20.0

1.19.0

1.18.0

1.17.0

1.16.3

1.16.2

1.16.1

1.16.0

1.15.1

1.15.0

1.14.2

1.14.1

1.14

1.13.1

1.13.0

1.12.0

1.11.0

1.10.0

1.9.1

1.9.0

1.8.0

1.7.0

1.6.1

1.6.0

1.5.0

1.4.0

1.3.0

1.2.0

1.1.0

1.0.0

0.13.0

0.12.0

0.11.0

0.10.0

0.9.0

Labels

Clear labels   

SSO

  

Third party

  

better for forum

  

bug

  

bug

  

documentation

  

duplicate

  

enhancement

  

future Vault

  

future Vault

  

future Vault

  

good first issue

  

help wanted

  

low priority

  

notes

  

pull-request

Mirrored from GitHub Pull Request

  

question

  

troubleshooting

  

wontfix

No labels

SSO

Third party

better for forum

bug

bug

documentation

duplicate

enhancement

future Vault

future Vault

future Vault

good first issue

help wanted

low priority

notes

pull-request

question

troubleshooting

wontfix

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/vaultwarden#1664

No description provided.