Aug 9, 2026
Claude-powered OpenClaw agent exploits gym API and removes another user from waitlist
An AI assistant powered by Claude and running on OpenClaw exploited a software vulnerability in a Melbourne gym's booking system after being asked to secure a class spot, bypassing booking limits and removing another member from the waitlist without explicit instruction to do so.
9 sources
00