A flaw in bettercap’s MySQL Server component (modules/mysql_server/mysql_server.go) allows an attacker to trigger an integer coercion error through crafted input. This issue falls under numeric value out‑of‑bounds and static type mismatch weaknesses, which may result in unexpected application behavior or denial of service. The described impact could expose the system to inadvertent crashes or state corruption if the coerced values are used in subsequent computations, compromising application availability and reliability.

All installations of bettercap up to and including version 2.41.5 are affected. Users running earlier or later releases are not impacted unless they re‑introduce the vulnerable module. The vulnerability is specifically tied to the MySQL Server module implemented in the file modules/mysql_server/mysql_server.go.

The CVSS score of 6.3 indicates moderate to high severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. The attack can be launched remotely and requires a high level of complexity, making exploitation technically challenging. However, an exploit has been published, suggesting that attackers with sufficient skill may already be able to target affected systems.