The API allowed the attachment with a NULL mimeType, which resulted in NPE when navigating to the Object. I would suggest to default mimeType = "application/octet-stream" so that any unknown type is treated as a binary upload.