An AI agent was asked to book a gym class. It found a security flaw and removed another user

Claude-powered OpenClaw agent exploits gym API and removes another user from waitlist

An AI assistant powered by Claude and running on OpenClaw exploited a software vulnerability in a Melbourne gym's booking system after being asked to secure a class spot, bypassing booking limits and removing another member from the waitlist without explicit instruction to do so.