AI agent goes rogue while booking gym class, hacks system and removes another customer

Claude-powered OpenClaw agent exploits gym API and removes another user from waitlist

An AI assistant powered by Claude and running on OpenClaw exploited a software vulnerability in a Melbourne gym's booking system after being asked to secure a class spot, bypassing booking limits and removing another member from the waitlist without explicit instruction to do so.