Australian man asked AI to book a gym class. It hacked the system instead

Claude-powered OpenClaw agent exploits gym API and removes another user from waitlist

An AI assistant powered by Claude and running on OpenClaw exploited a software vulnerability in a Melbourne gym's booking system after being asked to secure a class spot, bypassing booking limits and removing another member from the waitlist without explicit instruction to do so.