[BUG] sudo password not autofilling on a shared host

[K0SS4]

Title

sudo password not autofilling on a shared host

Platform

Website - Chrome

Server Installation Method

Docker

Version

2.2.1

Troubleshooting

• I have examined logs and tried to find the issue
• I have reviewed opened and closed issues
• I have tried restarting the application
• I have read Known Issues (Known Issues (Read Before Posting) #296)

The Problem

Hey. We have 4 users and around 30 SSH hosts with credentials. I created all of the credentials and hosts on one user and then shared the hosts to a role I created and assigned to every user. Every host has sudo auto-fill checked and it works on the user that created the host. When I try to auto-fill the password on a different user then it doesn't work. The only clue I have is that when clicking the confirm button on the "Insert password?" popup it generates some network traffic with an error:

How to Reproduce

1. Create a new user(not the admin)
2. Create a new role
3. Assign the role to the new user and the admin
4. Log in to the new user
5. Create a new credential and host
6. Check the sudo auto-fill option
7. Share the host with the created role
8. Logout and log back in on the admin user
9. Connect to the shared host
10. Run something like sudo -l and try inserting the password

Additional Context

I tried adding the password in the optional field below the sudo auto-fill switch but it also doesn't work

[K0SS4]

Checked again and it works when I specify the password in the optional field "Sudo Password". Just needed a refresh or something.

Still it's a pain to add the password in 2 different places when specifying it in the credential should be enough.

[K0SS4]

More information:

when running:

curl -s -X GET "http://<ip>:8080/host/db/host/6" -H "Cookie: i18nextLng=en; jwt=<token>" | jq

I get:

{
  "error": "SSH host not found"
}

So it cannot find the host with id 6 but when I run:

curl -s -X GET "http://<ip>:8080/host/db/host" -H "Cookie: i18nextLng=en; jwt=<token>" | jq

I can clearly see a host with id 6 listed:

{
    "id": 6,
    "userId": "<user_id>",
    "connectionType": "ssh",
    "name": "Nextcloud",
    "ip": "<ip>",
    "port": 22,
    "username": "<username>",
    "folder": "XEN",
    "tags": [],
    "pin": false,
    "authType": "credential",
    "enableTerminal": true,
    "enableTunnel": true,
    "tunnelConnections": [],
    "jumpHosts": [],
    "enableFileManager": true,
    "defaultPath": "/",
    "forceKeyboardInteractive": false,
    "statsConfig": {
      "enabledWidgets": [
        "cpu",
        "memory",
        "disk",
        "network",
        "uptime",
        "system",
        "login_stats"
      ],
      "statusCheckEnabled": true,
      "statusCheckInterval": 30,
      "useGlobalStatusInterval": true,
      "metricsEnabled": true,
      "metricsInterval": 30,
      "useGlobalMetricsInterval": true,
      "disableTcpPing": false
    },
    "terminalConfig": {
      "cursorBlink": true,
      "cursorStyle": "bar",
      "fontSize": 14,
      "fontFamily": "Caskaydia Cove Nerd Font Mono",
      "letterSpacing": 0,
      "lineHeight": 1,
      "theme": "termix",
      "scrollback": 10000,
      "bellStyle": "none",
      "rightClickSelectsWord": false,
      "fastScrollModifier": "alt",
      "fastScrollSensitivity": 5,
      "minimumContrastRatio": 1,
      "backspaceMode": "normal",
      "agentForwarding": false,
      "environmentVariables": [],
      "startupSnippetId": null,
      "autoMosh": false,
      "moshCommand": "mosh-server new -s -l LANG=en_US.UTF-8",
      "sudoPasswordAutoFill": true,
      "sudoPassword": "",
      "autoTmux": false
    },
    "createdAt": "2026-05-21 11:14:25",
    "updatedAt": "2026-05-21 11:14:25",
    "credentialId": 3,
    "overrideCredentialUsername": false,
    "quickActions": [],
    "notes": null,
    "enableDocker": false,
    "showTerminalInSidebar": true,
    "showFileManagerInSidebar": false,
    "showTunnelInSidebar": false,
    "showDockerInSidebar": false,
    "showServerStatsInSidebar": false,
    "useSocks5": false,
    "socks5Host": null,
    "socks5Port": 1080,
    "socks5Username": null,
    "socks5ProxyChain": [],
    "portKnockSequence": [],
    "security": "any",
    "ignoreCert": true,
    "guacamoleConfig": {},
    "macAddress": null,
    "ownerId": "<owner_id>",
    "isShared": true,
    "permissionLevel": "view",
    "expiresAt": null,
    "hasPassword": true,
    "hasKey": false,
    "hasSudoPassword": false
  },

I redacted some of the information as I don't know how sensitive it is. I can say that the user_id and owner_id are of the user which created the host and credential - I checked with /users/list GET endpoint.

The commands above were run with the admin user's JWT token (not the user who created the host/credential). When I ran them with the owner's JWT token, it worked.