CVE-2026-8276: Integer Coercion Error in Bettercap MySQL Server Module
Summary
CVE-2026-8276: Bettercap has an integer coercion error in modules/mysql_server/mysql_server.go in github.com/bettercap/bettercap. Affects github.com/bettercap/bettercap/v2 versions < 2.41.7. Fixed in 2.41.7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Bettercap is a powerful, flexible, and modular network attack and monitoring tool designed for penetration testing and security assessments. It allows users to perform a wide range of network attacks and monitor network traffic in real-time. The MySQL server module within Bettercap enables users to simulate a MySQL server for testing purposes. However, this module has been found to contain an integer coercion error, which can lead to unexpected behavior and potential security risks.
Vulnerability Detail
The vulnerability identified as CVE-2026-8276 is an integer coercion error located in the MySQL server module of Bettercap. This error can occur when the application improperly handles integer values, potentially leading to buffer overflows or other unintended consequences. The ramifications of this vulnerability could allow an attacker to exploit the error to execute arbitrary code or disrupt the normal operation of the MySQL server module, posing a significant risk to systems utilizing Bettercap.
How To Fix
Latest published version: v2.41.7 as of 22 Oct 2026
go get github.com/bettercap/bettercap/v2@v2.41.7Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
2.41.7
This is the first release that contains the fix.
go get github.com/bettercap/bettercap/v2@v2.41.7Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid using the MySQL server module until the package is updated. This can be done by commenting out or removing any references to the MySQL server module in your Bettercap configuration.
Conclusion
The integer coercion error in Bettercap's MySQL server module poses a significant security risk. Users are strongly advised to update to version 2.41.7 or later to mitigate this vulnerability. For those unable to update immediately, disabling the MySQL server module is recommended as a temporary measure.
See every vulnerability recorded for github.com/bettercap/bettercap/v2 →
FAQ
CVE-2026-8276 is a vulnerability in the Bettercap MySQL server module that involves an integer coercion error, potentially leading to security risks.
This vulnerability can allow attackers to exploit the integer coercion error, potentially leading to arbitrary code execution or disruption of the MySQL server module.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If you cannot update the package, consider disabling the MySQL server module as a temporary workaround until the update can be applied.
More information can be found in the official vulnerability report at https://pkg.go.dev/vuln/GO-2026-5463.
References
Related vulnerabilities
Recent vulnerabilities recorded for github.com/bettercap/bettercap/v2.
